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CIOs  rarely  discover  the  insider  crime  that  can  ruin  companies 


BY  KIM  S.  NASH 
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WITH  A  TALENT 

FOR  FINDING  TALENT. 


Introducing  SeeMorer  Monster’s  next-level  search  technology.  Through  simple,  seamless 
integration  with  all  systems,  SeeMore  consolidates  all  of  your  resume  databases  in 
one  safe,  secure  location.  Your  internal  databases.  Monster’s  database.  Referrals. 
Social  networks.  Even  other  job  sites.  All  in  the  same  place.  The  benefit?  An  HR  department 
better  able  to  streamline  their  talent  management  workflow  to  reduce  hiring  time  and 
increase  productivity.  SeeMore.  From  Monster.  Find  better. 

0  0 . 

Visit  findbetter.monster.com  to  learn  more  about  S@eMore  <§> 
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Introducing  NTT  DATA  Americas. 

Your  Innovation  Partner. 


Seven  companies  integrated  as  one  NTT  DATA  Americas  team. 

AgileNet  I  Intelligroup  I  Keane  I  MISI  Company  I  NTT  DATA  International  I  The  Revere  Group  I  Vertex  Software 


Every  day  around  the  world  NTT  DATA  helps  companies  of  all  sizes  to  flex 
their  businesses,  enabling  them  to  capitalize  on  opportunities  and  manage 
risk  faster  and  more  efficiently.  We  have  the  technology  know-how,  industry 
insight,  and  global  reach  you  need  to  navigate  changing  conditions. 

No  endless  timelines.  No  overblown  budgets.  No  unattainable  promises. 
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TODAY,  ONLY  34%  OF  PEOPLE 
WORK  FROM  A  SINGLE  LOCATION 
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MOTODEV  for  Enterprise  App  Development  Support 


MOTOROLA  SUPERIOR  ANDROID  SOLUTIONS  MEAN  BUSINESS 


Screen  images  simulated.  MOTOROLA  and  the  Stylized  M  Logo  are  registered  trademarks  of  Motorola  Trademark  Holdings  Ll.C.  Android  is  a  trademai  L  of 
Coogle,  Inc,  Alhother  prdduct  arid  service  names  are  the  property  of  their  respective  owners,  ©  2012  Motorola  Mobility,  Inc  All  tights  reserved. 


BUSINESS 

READY 


•  n  iu?s  tO'itt  titx/Hjr  Stx>9  Mews 


S:jces  <&L:e  Quic*off, cs 


LIFE.  M  POWERED 


Defining  Big  Data 


Everyone's  Business 

As  the  CTO  of  the  Sesame  Workshop  (Big  Bird  and  Elmo  are  part  of  his 
user  base),  Noah  Broadwater  was  one  of  the  most  popular  speakers  at  IDG 
Enterprise’s  recent  Consumerization  of  IT  in  the  Enterprise  conference. 
(IDG  Enterprise  is  the  parent  company  of  CIO  magazine.) 

But  it  wasn’t  just  his  duffel  bag— packed  with  giveaways  such  as  Grover 
dolls  and  Oscar  the  Grouch  lunch  boxes— that  gave  him  such  a  natural 
advantage  on  stage.  It  was  his  frank  advice  to  IT  organizations  scrambling 
to  cope  with  the  onslaught  of  consumer  technologies,  social  media  and 
mobility  demands. 

“Go  talk  to  legal  before  you  do  anything,”  Broadwater  said.  “Once  you 
have  legal  on  your  side...you  can  embrace  tons  of  new  technologies.”  He 
further  urged  IT  groups  to  “stop  treating  users  like  idiots”  in  the  realms  of 
security  and  data  protection. 

“Users  understand  security  better  than  you  think.  Explain  to  them  what 
you’re  doing  and  why,”  he  added.  “IT  is  there  to  protect  and  to  serve.” 

That  sentiment  resonated  deeply  with  me  and  reminded  me  of  the 
concerns  I’ve  heard  so  many  CIOs  express  in  recent  months.  What’s  the 
best  way  to  serve  the  escalating  demands  of  iiber-mobile,  consumer-IT- 
crazed  businesses  while  still  protecting  the  company’s  data  and  intellectual 
property? 

Our  cover  story  in  this  issue  (“Fraud  Happens,”  Page  34)  explores 
another  aspect  of  the  protect-and-serve  duties  that  are  inherent  in  the  CIO’s 
role:  preventing  and  detecting  insider  crime.  This  is  a  tough  subject  to  write 
about  because  few  CIOs  will  speak  on  the  record  about  it.  Senior  Editor 
Kim  S.  Nash  found  that  basic  technology  safeguards  are  all  too  often  miss¬ 
ing  in  fraud  cases.  In  more  than  1,800  cases  of  insider  financial  crimes, 
she  notes,  “IT  controls  came  in  dead  last”  among  the  11  methods  of  fraud 
detection  identified  by  investigators. 

As  consumer  technologies  pour  into  the  enterprise— and  as  unprec¬ 
edented  amounts  of  data  are  being  accessed  from  mobile  devices— now 
is  the  perfect  time  to  raise  these  issues  in  your  own  company.  (Go  talk 
to  legal.) 

As  we  talked  to  various  experts  for  this  story,  it  became  clear  that  no 
single  executive  or  department  can  carry  the  full  weight  of  anti-fraud  activi¬ 
ties.  But  the  CIO  emerges  as  a  potentially  powerful  voice  in  making  this 
everyone’s  business. 


A  new  study  from  Echelon  One  shows  that 
nearly  half  of  IT  leaders  are  concerned 
about  big  data,  and  more  than  half  lack 
the  tools  to  properly  manage  data 
in  their  IT  systems.  Senior  Writer  Thor 
Olavsrud  concludes  that  without  the 
right  tools,  a  huge  quantity  of  data  is 
basically  garbage.  Most  respondents 
to  the  survey-62  percent-said  they 
already  manage  more  than  one  terabyte 
of  data  and  more  is  coming  in  all  the  time 
from  sources  such  as  sensors,  transaction 
records,  images,  videos  and  social  media 
posts,  www.cio.com/article/700804 

A  Plus  for  Business? 

Google+  recently  gained  its  100 
millionth  user,  but  who  is  using  it? 
Contributing  Writerjennifer  Lonoff  Schiff 
found  that  most  members  are  probably 
individuals,  not  businesses,  but  Google 
hopes  to  change  that.  Schiff  says  Google+ 
can  help  your  business  if  your  company 
already  uses  Facebook  and  Twitter  for 
social  media  marketing.  A  Google+ 
business  page  will  increase  your  ranking 
in  search  results,  allow  you  to  video 
chat  with  customers,  and  provide  free 
focus  groups  for  new  products. 
www.cio.com/article/700561 

The  World  of  Women  CIOs 

CIO  Paradox  columnist  Martha  Heller  says 
that  the  last  time  she  checked,  a  mere 

nine  percent  of  CIOs  were  women,  but 

women  taking  the  IT  helm  at  large  compa¬ 
nies  has  been  big  news  lately.  Heller  high¬ 
lights  the  new  female  CIOs  of  Walmart, 

J.C.  Penney,  Intel  and  Dell.  There  are 
also  a  few  notable  men  in  new  CIO  gigs, 
too,  including  at  Epsilon  and  Goodwin 
Procter,  blogs.cio.com/node/16859 


Compiled  by  Editorial  Assistant  Lauren 
Brousell.  Have  a  comment  about  a  story  in 


Maryf  ran  Johnson,  Editor  in  Chief,  CIO  Magazine  &  Events 

mfjohnson@cio.com 


this  issue?  Go  to  www.cio.com/issue/ 
20120401  or  write  to  ietters@cio.com. 
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New  Generation  Intel®  Xeon®  E5 


HPC  Systems  Optimized  for  Scientific,  Engineering  and  Computational  Finance  Applications 


Up  to  20  GPUs  in  7U  ,1 

Non-Blocking  Native  PCI-E  3.0  xl  6  Direct  Connections  to  GPUs 

•• 

Centralized  Remote  Management  Module  f0 

(IPMI  2.0,  KVM-over-IP,  Remote  Virtual  Media) 

Redundant  Platinum  Level  (94%+)  High-Efficiency  Power  Supplies 
WewDual  Intel®  Xeon®  E5-2600  Processor  Family 


GPU  SuperBlade' 

SBI-7127RG 
Suports  20  GPUs  in  7U 


1U  3/4  GPU  Su| 

SS1027GR5 
Supports  Up  to  4  Double 


4U  4  GPU  SuperServer® 

SS7047GR  Series 

Supports  Up  to  4  Double-Width  GPUs  in  4U 


. 

2U  4/6  GPU  SuperServer® 

SS2027GR  Series 

Supports  Up  to  6  Double-Width  GPUs  in  2U 
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WeP  wer  the  Cloud 

www.supermicro.com/X9 


Windows  HPC  Server 


©  Super  Micro  Computer,  Inc.  Specifications  subject  to  change  without  notice. 
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The  relationship  between  business  and  IT  is  often  strained.  Business 


demands  responsiveness,  especially  to  new  requests.  Whereas  IT 


struggles  to  simply  keep  existing  applications  running  and  deliver 
on  agreed-upon  SLAs.  The  solution  is  a  converged  IT  infrastructure. 


CIO 


Custom  Solutions  Group 


As  technology  becomes  increasingly  pervasive, 
many  enterprises  see  a  widening  gap  between 
what  the  business  demands  and  what  IT  can 
deliver.  IT  simply  can't  keep  up  with  the  speed 
of  business — lacking  the  agility  to  respond  to 
business  requests  in  a  timely  manner. 

Fortunately,  this  all-too-common  scenario  does  not  have 
to  be  the  reality.  The  answer  for  many  organizations  rests 
with  deployment  of  a  converged  infrastructure  environ¬ 
ment.  Converged  infrastructure  is  a  set  of  automatically 
provisioned  IT  services  and  applications  utilizing  interopera¬ 
ble  resource  pools  of  servers,  storage,  networking,  security, 
power  and  cooling — all  managed  through  a  common 
management  platform. 

Done  right,  a  converged  infrastructure  accelerates  IT 
by  shifting  precious  resources  to  innovation,  readying 
for  the  cloud  and  delivering  value  to  the  business  faster, 
explains  Duncan  Campbell,  vice  president  of  marketing  for 
HP  Converged  Infrastructure.  "To  compete  in  the  age  of 
'instant  everything,'  organizations  need  an  IT  infrastructure 
that  enables  agile  and  rapid  service  delivery  while  driving 
out  costs.  That's  what  converged  infrastructure  helps  IT 
organizations  accomplish." 

And,  moving  to  a  converged  infrastructure  environment 
does  not  necessarily  translate  to  a  complete  rip  and  replace, 
especially  when  embracing  an  open,  standard-based  solu¬ 
tion  set.  "Organizations  have  a  significant  investment  in  IT 
already  and  understandably  want  to  maximize  their  existing 
assets,"  he  says. 

THE  SURVEY  SAYS 

The  tangible  benefits  of  moving  toward  a  converged  infra¬ 
structure  are  quite  clear  in  the  recent  IDC  Research  report, 
Measuring  the  Business  Value  of  Converged  Infrastructure  in 
the  Data  Center.  Findings  point  to  these  three  concepts: 

■  Rapid  response:  Study  results  show  that  within  a 


traditional  environment  it  takes  an  average  of  20  days  to 
respond  to  a  business  request  for  something  new.  However, 
in  a  converged  environment  the  response  time  drops  to  five 
days,  yielding  a  75  percent  reduction  in  service  delivery 
time. 

■  Innovative  shift:  Within  traditional  IT  environments, 
operations  consumes  more  than  70  percent  of  IT  labor  re¬ 
sources;  less  than  30  percent  is  used  to  enhance  productiv¬ 
ity,  competitiveness  and  customer  experience.  Converged 
environments  allow  the  IT  organization  to  flip  these 
numbers  and  focus  on  delivering  the  innovative  solutions 
businesses  require  to  compete. 

■  Uptime:  In  a  converged  infrastructure,  businesses 
go  from  an  average  of  10  hours  of  unplanned  downtime 
to  less  than  20  minutes.  That's  a  97  percent  reduction  in 
downtime — an  extremely  important  benefit  as  employees 
and  customers  demand  access  to  IT  systems  24x7, 365  days 
a  year. 

"As  the  study  results  demonstrate,  the  only  way  to 
effectively  shift  resources  from  operations  to  innovation  is 
through  infrastructure  convergence,"  says  Campbell. 

BOTTOM  LINE 

As  organizations  become  increasingly  focused  on  utilizing 
technology  to  achieve  a  competitive  advantage,  infrastruc¬ 
ture  convergence  is  inevitable.  The  approach  will  ultimately 
define  an  organization's  ability  to  succeed  or  fall  behind. 

So  having  experienced  partners  like  HP  and  Intel  by  your 
side — delivering  open,  standards-based  solutions  designed 
for  convergence — can  make  all  the  difference. 


To  learn  more  about  how  your  IT  organization  can  benefit 
from  a  converged  infrastructure  environment  today,  and 
for  additional  research  results,  download  the  IDC  white 
paper  at  www.convergedinfrastructure.com 


Brought  to  you  by  HP  and  Intel.  Intel  and  the  Intel  logo  are  trademarks  of  the  Intel  Corporation  In  the  U.S.  and/or  other  countries. 


I.  T.  WORKS  BETTER  TOGETHER. 


With  HP  Converged  Infrastructure  solutions  powered  by  Intel®  Xeon®  processors,  you  can 
spend  over  70%  of  your  time  and  IT  budget  on  innovation  rather  than  maintenance.* 


HP  Converged  Infrastructure  integrates  servers,  storage,  networking,  security, 
and  management  software  into  turnkey  systems  that  accelerate  IT,  reduce 
application  provisioning  time  by  75%,  and  get  you  ready  for  the  cloud.* 


convergedinfrastructure.com 


‘Substantiation:  HP  white  paper,  Measuring  the  Business  Value  of  Converged  Infrastructure  in  the  Data  Center,  October  2011 
©  Copyright  2012  Hewlett-Packard  Development  Company,  L.P.  The  information  contained  herein  is  subject  to  change  without  notice. 
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FROM  THE  CEO 

Flip  the  Switch 

As  the  U.S.  economy  begins  to  brighten,  it’s  reassuring  to  see  spending 
in  the  manufacturing,  retail,  financial  and  healthcare  sectors  starting  to 
respond.  Conversations  within  the  IT  leadership  community  also  seem  to 
be  lightening  up,  as  IT  priorities  are  rebalanced  to  include  strategies  for 
revenue  growth  and  customer  engagement. 

Since  the  recession,  technology  executives  have  had  their  heads  down, 
diligently  executing  on  projects  to  consolidate,  standardize,  and  optimize 
costs.  Those  efforts  have  largely  centered  on  what  author  Geoffrey  Moore 
aptly  terms  “systems  of  record,”  meaning  the  ERP,  CRM,  data  center  con¬ 
solidation,  virtualization  and  security  systems  underlying  decades  of 
increasingly  efficient  enterprise  business  processes.  We  couldn’t  do  global 
business  without  them. 

Yet  many  CEOs  are  now  turning  to  CIOs  to  help  them  accelerate 
revenue  growth  and  deepen  engagement  with  customers.  If  that  sounds 
familiar,  it’s  no  wonder.  This  is  probably  the  third  cycle  in  the  past 
decade  where  you’ve  been  asked  to  flip  the  switch  from  cutting  costs  to 
generating  revenue. 

The  difference  this  time  is  the  amazing,  innovative  lineup  of  technologies 
now  at  your  disposal.  Walking  the  halls  at  our  recent  Consumerization  of 
IT  in  the  Enterprise  conference  in  San  Francisco,  I  was  impressed  by  the 
levels  of  enthusiasm  these  technologies  are  generating. 

Moore  calls  this  latest  wave  of  Web-based,  customer- friendly,  consumer- 
driven  IT  “systems  of  engagement,”  referring  to  their  enormous  effect  on 
the  way  we  collaborate  and  connect  in  our  business  and  personal  lives. 
The  Big  5  fueling  this  new  engagement,  of  course,  are  cloud,  social,  mobile, 
consumer  IT  and  big  data.  All  of  them  enable  business,  to  varying  degrees, 
to  engage  more  meaningfully  than  ever  before  with  an  ecosystem  of  custom¬ 
ers,  partners  and  employees. 

To  stay  relevant  in  the  C-suite,  CIOs  must  shift  focus  from  systems  of 
record  to  systems  of  engagement.  It’s  clearly  a  question  of  when,  not  if, 
engagement  will  take  primary  importance. 

Are  you  moving  fast  enough  into  this  new  era  of  engagement?  What’s 
holding  you  back?  Is  it  budget,  structure,  talent,  fear? 

No  matter.  Your  CEO  expects  you  to  rise  to  the  occasion.  It’s  time  to  flip 
the  switch  and  engage. 


Michael  Friedenberg,  President  and  CEO 

mfriedenberg@cio.com 
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2012  Sogeti  Windows  Is  a  trademark  of  the  Microsoft  Corporation. 


I  started  my  new  business  pitch, 


saw  Tim’s  burrito-inspired  brainstorm, 


compared  it  to  the  last 
account  we  won 


and  hit  ‘send’ 


on  the  way 


Sogeti’s  Windows  deployment  gives  your  employees  the  flexibility  to  work  the  way  they  want  to. 

As  the  workplace  loses  its  boundaries,  Sogeti  lets  your  employees  stay  productive  on  any  device,  wherever  they  are.  That’s  because 
we  believe  the  best  solutions  aren't  based  on  hardware  or  technology,  but  on  the  way  people  work.  We've  performed  more  Windows 
deployments  than  anyone,  so  your  cost-effective,  secure  solution  will  be  up  and  running  fast.  You’ll  forget  you  ever  worried  about 
application  compatibility.  Speak  with  one  of  our  Windows  Deployment  specialists,  and  you’ll  get  an  estimate  in  half  an  hour,  Let  the 
unbridled  multi-tasking  begin. 


sogeti 


sogeti.com 
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Scan  here  to  visit  our  Flexible  Workstyle  Resource  Center, 
where  you  can  learn  more  about  what  sets  our  deployments  apart. 
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Cloud  Spending  Headed  Up 

Many  CIOs  say  cloud  services  are  a  plus  for  business  continuity  and  speedy 
deployment  but  they  still  worry  about  security  by  lauren  brousell 


Six  out  of  10  U.S.  companies  already  have  at  least  one 
application  in  the  cloud,  and  71  percent  expect  to  increase 
spending  on  cloud  services  in  the  next  12  months,  accord¬ 
ing  to  a  recent  IDG  Enterprise  survey  of 554  IT  profession¬ 
als,  including  357  heads  of  IT. 

Most  respondents  (64  percent)  agreed  with  the  state¬ 
ment  that  cloud  computing  will  mean  higher  costs  in  the 
short  term,  but  will  save  money  in  the  long  term. 

Barr  Snyderwine,  CIO  of  Hargrove,  an  events  manage¬ 
ment  company,  says  using  the  public  cloud  is  his  way  of 
keeping  costs  down.  The  company  is  using  an  online  col¬ 
laboration  tool  for  document  sharing  because  “it’s  so  cheap 
I  can’t  say  no,"  he  says.  “We  are  probably  saving  money  in 
the  long  run  on  the  [business]  continuity  side.” 

In  fact,  84  percent  of  the  survey  respondents  cited  busi¬ 
ness  continuity  as  the  top  business  driver  for  their  cloud 
investments.  Snyderwine  says  he  is  also  looking  to  put 
Microsoft’s  Exchange  in  the  cloud  as  part  of  his  continuity 
plan.  “The  comfort  of  having  completely  redundant  serv¬ 
ers  is  very,  very  attractive,”  he  says. 


In  the  survey,  respondents  said  other  top  business 
reasons  for  moving  IT  to  cloud  services  include  speed  of 
deployment,  gaining  the  flexibility  to  react  to  market  con¬ 
ditions,  and  improving  customer  support. 

Tim  Walter,  CIO  of  CrossCom  National,  a  retail  systems 
provider,  has  a  different  reason:  He’s  moving  company 
data  into  a  private  cloud  in  hopes  of  achieving  greater  data 
consistency  and  integration.  “You  can  get  systems  in  the 
same  cloud  to  talk  [to  each  other],”  Walter  says. 

But  putting  data  in  the  cloud  also  carries  risks:  70  per¬ 
cent  of  the  respondents  said  security  concerns  are  the  top 
barrier  to  their  adoption  of  cloud  computing. 

Walter  says  one  challenge  is  having  data  from  different 
types  of  customers  in  the  cloud,  because  each  customer 
has  different  security  needs.  “We  look  at  who  requires 
the  tightest  [security]  levels  and  try  to  work  everyone  else 
toward  [those],”  he  says. 


Contact  Editorial  Assistant  Lauren  Brousell  at  lbrousell@ 
cio.com.  Follow  her  on  Twitter:  twitter.com/lbrousell. 
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Five-Year  Plans 

What  are  your  expectations  for  cloud  computing 
over  the  next  five  years? 


Only  a  few  IT  operations  will  be  in  the  cloud 


38% 


31% 


The  majority  of  our  IT  operations  will  be  in  the  cloud 


17% 


We'll  limit  our  cloud  activity  to  private  clouds 


At  Least  They  Asked 

Do  departments  and  business 
units  consult  IT  before  buying 
cloud  services? 

620/o 

Always  (it's  required) 

280/o 

Often  or  sometimes 


8% 

Well  limit  our  cloud  activity  to  software  as  a  service 


6% 

Rarely  or  never 


Aiwa 
partnering 


Managed 

Recovery 

Program 

Partnering  with  your  team  to  develop,  implement,  operate 
and  maintain  your  recovery  program.  Offering  contractually 
guaranteed  uptime  levels,  all  backed  up  by  decades 
of  experience  and  proven  availability  expertise.  Always. 

Managed  IT  Services.  Recovery.  Cloud. 

Find  out  more  at  www.sungardas.com 


SUNGARD 

Availability  Services 
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Job  Search  Done  Right 

Networking  online  creates  new  headaches  and  new  opportunities, 

Here  are  four  techniques  for  preventing  missteps,  by  kristen  lamoreaux 


Executives  exploring  options  outside  their  current 
company  are  often  in  need  of  job  search  etiquette  tips.  Espe¬ 
cially  since  the  immediacy  and  transparency  of  today’s  tech¬ 
nology  can  easily  create  an  uncomfortable  situation.  So  how 
can  you  avoid  being  “that  guy”  while  still  incorporating 
social  networking  tools  into  your  job  hunt? 


It’s  up  to  you  to  keep 
your  name  out  there 
by  conducting  yourself 
professionally  online. 


A  good  first  rule  of  thumb:  If 
you  find  yourself  hesitating  before 
clicking  send,  stop  and  review 
what  you’re  doing.  Laying  the  right 
groundwork  with  your  network  can 
also  help  protect  your  reputation. 

Organize  your  contacts  by 
trust  level.  Say  you’ve  decided  it’s 
time  to  look  for  a  new  job  and  want 
to  begin  to  contact  people  in  your 
network.  You  should  be  building 
concentric  circles  based  on  trust 
levels  and  initiate  contact  with  your 
core  trusted  resources  first.  But  you 
may  want  to  modify  the  tone  of  your 
conversation  from,  “Get  me  the  heck 
out  of  here!”  to  “I’m  seeking  more 
challenge  than  my  current  company 
offers,”  depending  on  your  relation¬ 
ship  with  your  contact. 

Never  talk  trash.  Bashing  your 
current  employer  to  professional 
contacts  is  never  acceptable.  Too 
many  networking  conversations 


begin  with,  “Of  course  this  must 
be  kept  confidential,  but  so-and- 
so  said...”  Dishing  dirt  is  infinitely 
appealing,  but  the  world  we  work 
in  is  a  small  one.  It’s  far  too  easy  for 
your  name  to  be  sullied  when  you 
toss  around  negative  opinions. 

Be  direct  in  your  requests  for 
help.  Job  seekers  commonly  make 
the  mistake  of  being  too  hesitant  to 
ask  for  help  right  off  the  bat.  Don’t 
simply  ask  networking  contacts  to 
keep  you  on  their  radar  screen.  Most 
of  us  have  about  5,000  people  on  our 
radar  screens  that  we’ve  completely 
forgotten  about.  We  all  have  good 
intentions  when  we  use  that  phrase, 
but  it’s  too  passive  to  be  effective.  It’s 
human  nature  to  want  to  help  some¬ 
one  in  need,  and  people  remember 
the  times  they’re  able  to  provide  real 
assistance. 

So  make  that  easy  for  them.  Imag¬ 
ine  you  contact  a  former  CEO  and  tell 


her  you’re  being  downsized.  Here  are 
two  ways  she  could  view  that  conver¬ 
sation  after  you  hang  up,  depending 
on  how  you  direct  it:  1)  “I  got  a  call 
from  Bob  today.  He’s  losing  his  job. 
[sigh]  So  many  folks  are  being  cut; 
the  economy  just  sucks  right  now.” 
Or,  2)  “I  got  a  call  from  Bob  today. 
He’s  losing  his  job.  He  asked  me 
for  the  names  of  three  companies  I 
respect  so  he  could  research  them.  I 
named  X,  Y  and  Z.  I’m  really  glad  I 
was  able  to  help  him.” 

Which  conversation  seems  more 
memorable?  The  yet-another-boat- 
anchor  depressing  one  or  the  one 
that  was  action-oriented  and  posi¬ 
tive?  Develop  a  list  of  short  tasks 
that  will  advance  your  search  in 
tactical  and  practical  ways.  By  keep¬ 
ing  the  tasks  small  and  not  too  time- 
consuming,  you’re  being  respectful 
of  people’s  calendars  and  increasing 
your  chance  for  a  positive  outcome. 

Be  present  online.  Capitalize 
on  tools  such  as  Linkedln  and  use 
your  status  updates  wisely.  Share 
an  article  once  a  month.  Twice  a 
month,  swap  out  a  book  on  your 
Amazon  reading  list.  Regularly  look 
for  industry  events  or  webinars  and 
indicate  you’re  interested  in  attend¬ 
ing,  or  join  a  professional  group. 

It’s  up  to  you  to  keep  your  name 
out  there  by  conducting  yourself  pro¬ 
fessionally  online.  Folks  really  read 
their  Linkedln  network’s  updates. 
What  you  share  can  demonstrate 
your  effort  to  improve  yourself  and 
position  yourself  as  a  thought  leader. 


Kristen  Lamoreaux  is  president  and 
CEO  of  Lamoreaux  Search,  which  finds  IT 
professionals  for  hiring  managers. 
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FOR  DATA  CENTERS, 
AC  POWER  IS  READY 
TO  FLAT-LINE. 


Alternating  current  has  been  the  only  viable  option  to  power 
data  centers  since  there  were  data  centers  to  power.  But  now, 
STAR  LINE®  DC  Solutions  has  created  a  revolutionary  380V 
direct  current  alternative.  With  STARLINE’S  exclusive  Chip2Grid™ 
technology,  data  centers  can  realize  35%  lower  operating  and 
maintenance  costs,  use  33%  less  space,  save  1 5%  on  capital 
expenditures,  and  be  200%  more  reliable.  And  this  technology 
is  available  today.  To  learn  more,  visit  StarlinePower.com. 
DIRECT  CURRENT.  BETTER  RESULTS. 
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Buyer  Beware 

Three  tips  for  keeping  mobile  devices 
safe  from  harmful  apps 


1  Research  before  you  install:  Vet  apps  by  looking  at 

reviews  in  the  store  offering  the  software.  The  more  reviews 
the  better,  since  this  typically  means  more  users  have  tested 
the  app.  You  can  also  perform  a  quick  Google  search  for  the  app's 
name  or  publisher.  Minimal  results  should  be  a  red  flag. 


2  Familiarize  yourself  with  app  permissions:  Don't 
breeze  past  permissions  screens  intended  to  alert  you  to 
potentially  sensitive  resources  that  the  app  wants  to  access. 
According  to  antivirus  software  maker  McAfee,  if  something  seems 
odd-like  a  game  that  needs  access  to  your  address  book-you  can, 
and  should,  block  the  request.  If  an  app  won't  work  without  being 
granted  certain  permissions,  you  need  to  weigh  its  risks  and  benefits. 


3  Shop  at  reputable  stores:  It  might  seem  obvious,  but 
the  simplest  way  to  shop  safely  is  to  stick  with  your  official 
app  store.  McAfee  also  notes  Android  users  can  block  the 
installation  of  non-Android  Market  apps  by  unchecking  "Unknown 
sources"  in  the  Applications  Settings  menu.  -A!  Sacco 


I  mishandled  the  rollout 
of  an  IT  system,  causing 
big  political  problems  for 
my  employer.  How  can  I 
repair  my  reputation? 

ALWAYS  apologize  and  react  quickly.  Whatever 
your  business  or  industry,  things  can  and  will  go 
wrong.  How  mistakes  affect  the  way  you're  per¬ 
ceived  is  determined  by  one  primary  factor-how 
you  respond.  If  your  response  is  weak,  defensive 
or  arrogant,  the  damage  to  your  reputation  will 
be  far-reaching  and  impossible  to  control.  If 
you  own  the  problem  and  handle  it  swiftly  and 
adeptly  the  damage  will  be  minor.  Many  leaders' 
reputations  actually  improve  because  of  how 
they  handle  a  crisis.  Think  of  how  Johnson  & 
Johnson  handled  the  Tylenol  crisis  in  1982  ver¬ 
sus  how  BP  dealt  with  the  oil  spill  in  2010. 


WORTH 

READING 


SOMETIMES  you  need  to  take  your  lumps  and 
move  on.  Take  Martha  Stewart,  for  example. 
When  she  entered  a  federal  prison,  there  was 
rampant  speculation  about  the  future  of  her 
company.  But  her  comeback  was  remarkable. 
Upon  her  release,  she  hit  the  talk-show  cir¬ 
cuit,  made  light  of  the  situation,  and  revealed 
her  "delight"  when  prison  officials  put  her  in 
charge  of  cleaning.  How  did  she  manage  to 
reduce  the  damage,  and  perhaps  become  even 
more  admired?  She  faced  the  music,  did  her 
time,  and  moved  on.  You  need  to  do  the  same. 


book  Sleeping  with  your  Smartphone 

By  Leslie  A.  Perlow 

Smartphones  make  work  more  convenient  but 
hurt  your  productivity.  Based  on  her  research 
and  an  experiment  at  a  Boston  company  this  Har¬ 
vard  Business  School  professor  thinks  managers 
should  add  “disconnected”  time  to  the  workday 
and  shares  easy  ways  to  implement  the  policy. 
Harvard  Business  Review  Press,  $27.00 


NEVER  say  or  do  anything  you  wouldn't  want 
on  the  front  page  of  the  Wall  Street  Journal. 
When  you're  in  a  leadership  role,  everything 
you  do  is  more  likely  to  be  scrutinized.  Use  this 
litmus  test:  Would  you  still  do  something  if  you 
knew  everyone  would  know?  If  that  gives  you 
pause,  think  twice  before  you  speak  or  act. 


Suzanne  Bates  is  the  author  of  Discover 
Your  CEO  Brand,  an  executive  coach,  and  CEO 
of  Bates  Communications.  Find  her  at 
bates-communications.com. 
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Remote  management 
without  agents. 

And  without  interruption 


Introducing  the  highest  performing,  most  manageable 
most  innovative  Dell™  servers  ever. 


Finally,  no  agents  to  install  and  manage.  iDRAC  7  gives  you  direct  out-of-band 
access  to  hardware  status,  inventory  and  configuration  so  you  can  monitor,  update, 
troubleshoot  and  remediate  regardless  of  the  server's  state.  It's  one  of  many  Dell 
innovations  that  combine  with  new  Intel®  Xeon®  processors  -  which  Intel  estimates 
can  provide  up  to  80%  more  performance  than  previous  generations'  -  to  give  you 
more  power  and  the  tools  to  harness  it.  So  you  can  dynamically  optimize  workload 
applications  and  be  prepared  for  whatever  the  future  brings. 


The  new  12th  Generation 
Dell’"  PowerEdge™ 
Servers  With  Intel ®  Xeon ® 
Processor  E5  Family 


Learn  more  at  dell.com/Performance  or  call  1-877-381-3355 


•Performance  comparison  using  geometric  mean  of  SPECintratebase2006.  SPECfp*_rate_base2066.  STREAM*_MP  Triad,  and  Linpack*  benchmark 
results  Baseline  geometric  mean  score  of  166.75  on  prior  generation  2S  Intel®  Xeon®  Processor  X5690  platform  based  on  best  published  SPECrate* 
scores  to  www  spec  org  and  best  Intel  internal  measurements  on  STREAM*_MP  Triad  and  Linpack  as  of  5  December  2011.  New  geometric  mean 
score  of  306  74  based  on  Intel  internal  measured  estimates  using  an  Intel®  Rose  City  platform  with  two  Intel®  Xeon®  processor  E5-2690,  Turbo 
and  EIST  Enabled,  with  Hyper-Threading,  128  GB  RAM,  Red  Hat*  Enterprise  Linux  Server  61  beta  for  x86_6,  Intel®  Compiler  12.1,  THP  disabled  for 
SPECfp_rate_base2006  and  enabled  for  SPECint*_rate_base2006. 

Intel,  the  Intel  logo,  Xeon,  and  Xeon  Inside  are  trademarks  or  registered  trademarks  of  Intel  Corporation  in  the  U.S.  and/or  other  countries. 
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Xeon * 


SHARE  ANYWHERE. 
CONTROL  EVERYTHING 
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Introducing  IntraLinks  Connect." 

Share  sensitive  content  with  partners  outside  the  corporate  firewall  securely,  compliantly  and  with  complete  visibility. 


Today,  every  enterprise  needs  to  be  an  extended  enterprise.  With  people  and  teams  working  together  in  real  time 
on  confidential  and  regulated  content  -  but  without  compromising  security,  compliance  and  control.  Now,  IntraLinks 
Connect  gives  you  the  enterprise-strength,  cloud-based  collaboration  platform  to  confidently  share  content  with 
partners  anywhere  outside  the  corporate  firewall,  while  controlling  your  content  everywhere. 


Get  the  free  white  paper:  "IDC  Analysis:  Secure,  Compliant 
Collaboration  in  the  Cloud"  at  lntraLinks.com/Connect 


IIS  INTRALINKS' 


Copyright©  2012  IntraLinks,  Inc.  All  rights  reserved. 


Enterprise.  Strength.  Collaboration. 


ILLUSTRATION  BY  PHIL  WHEELER 


innovation  and  business  value 


Beauty  and  the  Tablet 

Cosmetics  retailer  Sephora  gives  mobile  shopping 
a  shot  of  glamour  by  kim  s.  nash 

Beauty  is  now  in  the  hands  of  the  tablet  holder.  Cosmetics,  creams  and  gels  retailer  Sephora 
launched  an  app  last  year  that’s  designed  to  leverage  the  crisp  graphics  capabilities  of  Apple’s  iPad 
and  entice  users  not  just  to  browse,  but  to  buy.  Now  brick-and-mortar  shoppers  can  use  Sephora- 
provided  iPads  to  access  the  app  while  they  stroll  the  aisles  of  select  stores. 

Sephora  is  one  of  a  batch  of  leading-edge  companies  hoping  to  capitalize  on  tablet  commerce 
by  building  apps  with  the  iPad  in  mind.  While  tablets  still  trail  phones  when  it  comes  to  mobile 
shopping,  iPad  users  appear  more  likely  to  spend.  According  to  an  IBM  survey  conducted  last  year, 
iPad  users  who  visited  retail  websites  during  the  month  of  December  converted  their  browsing  to 
purchases  6.3  percent  of  the  time,  more  than  double  the  3.1  percent  for  users  of  other  mobile  devices. 

But  selling  on  tablets  is  fundamentally  different  from  selling  on  smartphones  and  requires 
a  carefully  thought-out  design.  Functions  such  as  embedded  video  and  page-swiping  instead  of 
scrolling,  for  example,  define  tablet  navigation.  ►  ► 
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*  *  •  35%  Employees  who  report  less  paper  consumption  at  their  companies,  aiim  •  *  *  8%  U.S.  airline  passengers  who 
use  a  tablet  in  the  air.  chaddick  institute  tor  Metropolitan  Development  •  •  •  31%  Online  ads  that  are  never  seen  by  consumers,  cot  s  ore 
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grow 


►  ►  Tablet  commerce  Continued  from  Page  19 
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Youthful  Indiscretions 


Tablet  shoppers  are  also  more  likely  to 
use  the  device  in  comfortable  surroundings. 

Bridget  Dolan,  vice  president  of  interactive 
media  at  Sephora,  says  its  app  was  designed 
to  weave  together  content  and  commerce 
with  the  expectation  that  customers  would 
be  in  a  different  setting  than  those  using  a 
PC  or  laptop.  “At  your  computer,  you  cut  to 
the  chase.  You’re  probably  at  work.  On  the 
iPad,  you’re  on  the  couch  or  at  a  coffee  shop,” 
she  says. 

Owned  by  Moet  Hennessy  Louis  Vuitton, 

Sephora  has  550  stores  in  the  United  States 
and  Canada.  The  beauty  company  wants  its 
app  to  immerse  customers  in  glamour,  Dolan 
says,  showing  palates  of  eye  shadows  from 
Paris,  Rome  and  Tokyo  and  pink  rouges  displayed  like  little 
breaths  of  luxury.  Sephora’s  magazine-style  catalog  empha¬ 
sizes  the  iPad’s  page-flipping  navigation  and  integrates  with  its 
website’s  existing  e-commerce 
infrastructure.  Customers  can 
browse  beauty  and  fashion  con¬ 
tent  and  buy  the  products  that 
appeal  to  them  in  photos  and 
articles.  They  can  watch  videos 
that  show  how  to  use  the  prod¬ 
ucts,  including  one  that  teaches 
viewers  how  to  create  a  “smoky 
eye.”  The  app  uses  the  device’s 
camera  to  create  a  virtual  mir¬ 
ror  for  users  to  test  techniques. 

One  mistake  some  companies  make  in  tablet  commerce  is 
providing  only  a  subset  of  the  features  available  on  the  regular 
website,  says  Alex  Schmelkin,  president  of  Alexander  Interac¬ 
tive,  a  Web  design  firm.  To  simplify  the  tablet  app,  Schmelkin 
says,  companies  might  omit  corporate  information  or  limit 
search  capabilities.  But  having  two  different  experiences  con¬ 
fuses  and  frustrates  customers,  he  says.  Companies  should  also 
optimize  their  websites  for  tablet  navigation  by  enlarging  text 
and  images  and  minimizing  the  use  of  Flash,  he  says. 

“We’re  creating  [tablet]  content  that  inspires  shopping,”  says 
Dolan.  “We  can  leverage  all  the  cool  features  of  an  iPad  that 
would  allow  you  to  experience  [shopping]  in  a  different  way.” 

Senior  Editor  Kim  S.  Nash  can  be  reached  at  k5nash@cio.com.  Follow 
her  on  Twitter:  twitter.com/knash99. 


Seven  out  of  10  young  employees  who  are  aware  of  their 
companies'  IT  policies  acknowledge  breaking  those  rules. 


Most  common  reasons  for  flouting  IT  restrictions: 

Q  Belief  they  aren't  doing  anything  wrong 
Q  Need  unauthorized  applications  for  work 
o  Policy  isn't  enforced 
O  Too  busy  to  think  about  policies 
O  Inconvenience  of  following  policies 


SOURCE:  CISCO  SURVEY  OF  2,800  PEOPLE 
UNDER  AGE  29,  DECEMBER  2011 


"We're  creating 
[tablet] 
content  that 
inspires 
shopping" 

-Bridget  Dolan,  Vice  President 
of  Interactive  Media,  Sephora 


Travel  With 
Less  Stress 

Though  we  may  not  have  flying  cars  and 
jetpacks  in  the  near  future,  a  new  study 
suggests  there  will  be  "transformative  tech¬ 
nologies"  that  make  travel  less  stressful  and 
chaotic  in  2020  than  it  is  today. 

For  example,  smartphone  users  will  be 
able  to  quickly  check  in  at  airports,  accord¬ 
ing  to  the  report  by  The  Futures  Company,  a 
consultancy  hired  by  global  travel  technology 
vendor  Amadeus  IT  Croup  to  study  the  future 
of  travel.  The  report  also  suggests  the  next 
decade  could  see  RFID  tags  used  to  keep  track 
of  luggage  and  intelligent  tickets  that  update 
the  traveller  about  delays  or  changes. 

In  the  study,  travellers  say  they'd  like 
online  access  to  their  own  collection  of  music 
and  movies,  as  well  as  personalized  travel 
guides  that  would  recommend  the  best 
restaurants  and  tourist  sites  based  on  peer 
reviews  and  favorite  bloggers. 

The  industry  should  develop  services  that 
enhance  the  travel  experience,  says  Eberhard 
Haag,  Amadeus's  EVP  of  global  operations. 
"By  moving  away  from  focusing  solely  on 
the  transaction,  travel  providers  will  be  able 
to  build  longer-term,  higher  value  and  more 
profitable  relationships  with  travellers." 

-Mitch  Betts 


. 


. S5°/o  CIOs  who  won't  develop  a  mobile  app  this  year.  Robert  Half  Technology . 40%  How  much  more  revenue  was 

generated  by  BlackBerry  apps  than  Android  apps.  vision  Mobile . 115  Kindles  Amazon  sells  per  100  paperbacks. 
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Securing  Your  Journey 
to  the  Cloud 


As  businesses  continue  their 
analysts  and  security  experts 
practices  must  change.  Tren< 
protecting  businesses  agains 
cyber  attacks  by  providing  re 
intelligence  and  network-wid 
our  solutions  you  gain  the  cert 
secure  across  all  environment 


OUTLIERAWARD 


On  February  2nd  201 2,  Trace3  named  it's  first  ever 
Outlier  Award  winner  at  a  gala  ceremony  in  Las 
Vegas.  The  event  drew  400  attendees  and  featured 
a  performance  by  famed  comedian  Kevin  Nealon. 

Of  the  7  finalists,  this  years'  winner  is  KEN  VENNER 
who  is  currently  CIO  of  SpaceX,  an  aerospace  firm 
focused  on  private  and  commercial  space  transport. 
Ken  was  chosen  because  of  his  unique  stance  on 
how  IT  should  be  like  air.  It  is  not  only  a  philosophy 
he  established  while  CIO  at  Broadcom,  but  also 
continues  to  share  with  the  IT  community. 

By  being  named  the  Trace3  Outlier  Award  Winner, 
Trace3  has  donated  $1 0,000  in  Ken's  name  to  CHOC 
Hospital  -  an  OC  based  Pediatric  Hospital  that 
specializes  in  neuroscience  and  the  continued  fight 
of  children's  cancer. 

Trace3  is  taking  nominations  for  the  201 3  Outlier 
Awards.  Please  go  to:  www.trace3.com/awards/  to 
learn  more. 


To  see  videos  of  this  years  ceremony  or  to  nominate  for  2013,  please  visit 

www.trace3.com/awards/ 


TRACE 


201 2  Outlier  Award  Winner 
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►  BUSINESS  STRATEGIST 
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Beyond  Usability 

Want  to  build  digital  products  that  customers  actually  want  to  use? 
Embrace  the  strategic  value  of  user-experience  design,  by  greg  laugero 


When  it  comes  to  building  digital 
relationships  with  your  customers— 
whether  it’s  through  a  mobile  app,  a 
portal,  or  a  new  device— what  matters 
is  the  user  experience.  Customers’ 
loyalty  (and  the  share  of  their  wallets  they  devote  to  you) 
depends  in  large  part  on  how  they  feel  about  your  digital 
product  or  channel.  Bad  experiences  hurt  the  brand  and 
leave  money  on  the  table. 

Today,  CIOs  are  getting  involved  in 
building  products  for  external  customers, 
but  unfortunately,  creating  great  user  expe¬ 
riences  continues  to  be  a  struggle  for  many 
big  IT  shops.  I  see  many  companies  that  still 
believe  that  pairing  a  business  analyst  with 
overloaded  business  stakeholders  will  yield 
compelling  digital  products.  Instead,  the 
result  is  typically  a  laundry  list  of  confused 
and  confusing  “business  requirements” 
that  yields  a  system  that  costs  a  lot  and  fails 
to  excite  (or  even  meet  the  expectations  of) 
customers. 

Creating  Passionate  Users 

Good  user  experience  (UX)  designers  have  been  tackling 
this  problem  for  the  last  decade.  To  be  clear,  I  don’t  mean 
doing  more  usability  testing  to  make  systems  more  “intui¬ 
tive.”  This  old-school  approach  grew  up  in  the  1980s  and 
’90s  when  computers  were  utilitarian  data-entry  and  pro¬ 
cessing  tools.  “Usability”  meant  increasing  task  efficiency 
and  reducing  data-entry  errors. 

I  mean  embracing  the  strategic  value  of  UX  design. 
UX  strategists  focus  on  creating  passionate  users  (engage¬ 
ment),  getting  them  to  come  back  again  and  again  (repeat 
visits)  and  making  products  fun  (gamification  is  all  the 
rage).  A  strategically  oriented  UX  designer  is  a  complex 
problem-solver  who  can  blend  business  objectives,  tech¬ 
nology  capabilities  and  a  rich  understanding  of  users  into 
innovative  and  compelling  digital  products  and  services. 


How  can  CIOs  use  UX  strategy  to  create  digital  products 
and  services  that  are  fun  and  easy  to  use,  and  that  deliver  all 
the  business  value  they  can?  The  challenges  lie  in  today’s 
requirements-gathering  and  budgeting  processes. 

This  is  what  I  see  quite  often:  Business  requirements 
and  scope  are  defined,  budgets  and  time  lines  are  set.  A 
contractor  is  hired  to  turn  requirements  into  wireframes 
(low-fidelity  screen  designs).  The  UX  designer  presents 
the  wireframes,  and  stakeholders  suddenly  start  remem¬ 
bering  things  that  didn’t  come  out  during 
the  requirements-gathering  stage.  The 
CIO  now  faces  a  dilemma:  miss  time  lines 
or  plow  forward  knowing  that  what  you 
release  may  not  meet  objectives. 

A  savvy  UX  designer  will  take  a  differ¬ 
ent  approach  to  gathering  requirements 
for  a  new  project,  or  can  breathe  new  life 
into  an  underperforming  one.  The  strategic 
UX  designer  will  get  out  of  the  office  and 
talk  to  customers.  For  example,  she  may 
create  a  “user  journey”  that  shows  how 
your  PC-based  channel  is  not  available  to 
users  when  they  need  it.  Perhaps  there’s  an 
opportunity  for  a  mobile  app? 

She  may  create  personas  and  scenarios  that  go  deeper 
than  marketing-driven  demographics  and  segmentation 
to  shed  light  on  customer  goals  and  motivations  that  are 
missed  by  your  channel.  Perhaps  there’s  an  opportunity 
to  use  game  mechanics  to  improve  engagement? 

Done  right,  UX  strategy  shows  stakeholders  how  to 
deliver  value  to  target  customers.  This  is  a  much  better 
basis  for  determining  business  requirements  and  project 
scope.  Focusing  on  the  customer  experience  also  allows  the 
team  to  make  the  proper  trade-offs  when  desirable  features 
run  up  against  the  realities  of  time  and  budget. 


Greg  Laugero  is  co-founder  of  Industrial  Wisdom.  He  helps  com¬ 
panies  turn  their  ideas  into  real  products  with  great  user  experi¬ 
ences.  Follow  him  on  Twitter:  twitter.com/prodctstrategy. 


Here's  how 
CIOs  can  use 
UX  strategy 
to  create  fun, 
easy-to-use 
digital  products 
and  services 
that  deliver  all 
the  business 
value  they  can. 
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Only  pay  for  what  you  need. 

Change  your  server  specifications  anytime! 

■  Adaptable  with  up  to  6  CPU,  24  GB  of  RAM,  and  800  GB  hard  drive  space 

■  On-the-fly  resource  allocation  -  hourly  billing 


1&1  DYNAMIC  CLOUD  SERVER 

3  MONTHS 


■  Dedicated  resources  with  full  root  access 

■  Linux  or  Windows®  operating  systems  available  with 
Parallels®  Plesk  Panel  10.4 

■  Free  SSL  Certificate  included 

■  2,000  GB  Traffic 

■  24/7  Hotline  and  Support 


V  Base  Configuration,  Starting  at  $49/month 


1&1  servers  are  housed  in  high-tech  data  centers  owned 
and  operated  by  1&1 


NEW:  Monitor  and  manage 
servers  through  1&1  mobile 
apps  for  Android 
and  iPhone®.  I 
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internet! 


==  1-877-461-2631  www.1and1.com 
□  1-855-221-2631  www.1and1.ca 


Offer  ends  April  30,  2012.  3  months  free  based  on  the  base  configuration  ($49/month)  for  a  total  savings  of  S147. 12  month  minimum  contract.  After  first  year  standard  price  applies. 
Setup  fee  and  other  terms  and  conditions  may  apply.  Visit  www.landl  .com  for  full  promotional  offer  details.  Program  and  pricing  specifications  and  availability  subject  to  change 
without  notice.  1  &1  and  the  1  &1  logo  are  trademarks  of  1  &1  Internet,  all  other  trademarks  are  the  property  of  their  respective  owners.  ©  201 2  1  &1  Internet.  All  rights  reserved. 


mm  City  Arms  Citizens  With  an  App 


To  free  citizens  trying  to  report  problems  using  a  cumbersome  phone 
system,  this  public-sector  CIO  went  mobile  by  lauren  brousell 


MOBILE  To  report  a  pothole  that 
could  be  harmful  to  your  car  in  the 
city  of  Cambridge,  Mass.,  citizens 
used  to  have  to  call  city  hall  and  then 
navigate  a  series  of  steps  to  be  con¬ 
nected  with  the  department  or  per¬ 
son  responsible  for  fixing  the  issue. 

Trouble  was,  the  average  caller 
didn’t  know  who  they  needed  to 
reach  and  often  ended  up  speaking 
with  the  wrong  person,  leaving  the 
problem  unresolved.  CIO  Mary  Hart 
knew  citizens  needed  an  easier  way 
to  report  their  concerns. 

Hart  met  with  her  internal  strat¬ 
egy  team  to  brainstorm  ideas  and 
then  partnered  with  mobile  app 
developer  iSite  to  create  an  app  for 
iPhone  and  Android.  The  Cambridge 
iReport  app  allows  smartphone  users 
to  report  issues  in  real  time  and  in 
fewer  steps. 

Hart  first  piloted  Cambridge 


iReport  through  the  city’s  website  to 
see  how  much  activity  it  would  get. 
She  received  80  reports  within  the 
first  month  and  made  the  decision  to 
skip  a  pilot  of  the  mobile  version  and 
go  straight  into  development. 

Rolled  out  in  October  2011, 
Cambridge  iReport  can  be  down¬ 
loaded  for  free  through  the  iPhone 
or  Android  app  store.  Hart  said  she 
chose  to  deploy  the  app  on  the  most 
popular  smartphones  and  plans  to 
include  others,  excluding  BlackBerry, 
depending  on  how  much  activity  the 
app  generates. 

The  app  lets  citizens  include 
photos  of  potholes,  burned-out  street 
lights,  graffiti  and  rodent  problems, 
or  just  send  text  descriptions.  Google 
Maps  marks  the  location  of  the  issue, 
and  if  it’s  within  six  miles  of  Cam¬ 
bridge,  it  gets  pulled  into  the  city’s 
work-order  system.  From  there,  it’s 


assigned  to  the  proper  city  worker. 

To  close  the  loop,  the  citizen  who 
submitted  the  issue  will  get  a  confir¬ 
mation  email  saying  her  complaint 
was  received  and  can  later  check  on 
the  progress  of  the  problem. 

The  city  spent  about  $45,000 
developing  the  app  and  has  gotten 
nearly  500  iPhone  downloads  and 
139  Android  downloads  through  the 
end  of  February  2012.  In  this  time, 
478  tickets  were  submitted  and  429 
of  them  have  been  resolved. 

Hart  has  been  working  to  market 
the  app  to  encourage  more  users  to 
download  it.  The  city  is  also  looking 
to  allow  citizens  to  report  more  types 
of  issues,  such  as  missing  street  signs 
or  excessive  noise. 


Contact  Editorial  Assistant  Lauren 
Brousell  at  lbrousell@cio.com.  Follow 
her  on  Twitter:  twitter.com/lbrousell. 


Mobile  Coupons  Light  Up  With 
New  Smartphone  Technology 

COMMERCE  San  Francisco-based  Mobeam,  a 
company  specializing  in  light-based  communications 
technology,  recently  announced  a  partnership  with 
corporate  giant  Procter  Sr  Gamble  aimed  at  bringing  to 
market  an  all-digital  mobile  coupon  system.  Mobeam's 
technology  makes  it  possible  for  existing  retail  point- 
of-sale  systems  to  read  electronic  coupons  presented 
on  a  mobile  phone. 

Given  PSrG's  reputation  as  a  bellwether  company  in 
the  consumer  products  industry  and  a  sophisticated 
user  of  IT,  the  new  partnership  bears  watching.  If  other 
players  in  the  smartphone  and  retail  ecosystem  go 
along-not  a  sure  bet-the  joint  project  could  revolu¬ 
tionize  the  use  of  mobile  coupons. 

-MarkRowh 


Bad  News  for  Google  Wallet 

SECURITY  Malware  researcher  Zvelo  reported  a  "brute  force 
attack"  involving  Google  Wallet  in  early  February,  just  as 
Google  is  trying  to  convince  Android  owners  to  feel  comfort¬ 
able  using  near-field  communications  (NFC)  capabilities  on 
their  smartphones  to  pay  for  goods  and  services.  (For  more 
on  NFC,  see  "5  Things  You  Need  to  Know,"  Page  30.) 

Google  first  launched  Google  Wallet  in  September,  on  the 
high-end  Samsung  Galaxy  Nexus  from  Sprint.  The  service  is 
expected  on  additional  Android  devices  in  the  near  future. 

But  according  to  Zvelo,  jailbroken  devices  could  easily  be 
tapped  for  Google  Wallet  PINs,  giving  exploiters  access  to 
stored  payment  card  information.  TheSmartPhoneChamp.com 
says  even  unrooted  phones  are  vulnerable.  It  seems  Google 
Wallet  PINs  can  be  changed  on  a  device  without  any  tie  to  a 
user's  Google  account.  "In  other  words,  they'd  be  able  to  add 
your  card  and  have  full  access  to  your  funds."  -A/  Sacco 
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The  IT  Revolution  is  happening  and  the  time  for  change  is  now— don’t  settle  for  inflexible 
systems  built  on  legacy  technology.  Keep  up  with  today’s  complex  IT  ecosystem  and 
manage  it  more  efficiently  than  ever  before  with  ServiceNow.  Join  the  movement. 
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ERP  on  Speed 

Why  a  small  drug  maker  on  a  tight  deadline  chose  prefab  ERP 


BY  STEPHANIE  OVERBY 

"ERP"  and  "rapid  implementation"  were  once  rarely  uttered  in  the  same  sentence.  But  smaller 
enterprises  in  particular  need  affordable,  reliable  software  that  can  still  be  rolled  out  quickly. 

Gallus  BioPharmaceuticals  is  one  ERP  customer  that  took  a  faster,  cheaper  approach. 
The  nascent  contract  manufacturer  of  biopharmaceuticals  acquired  an  existing,  FDA-approved 
biologies  plant  from  Johnson  &  Johnson  last  year  and  had  120  days  to  wean  itself  off  the 
corporate  giant’s  IT  infrastructure— including  desktops,  networks,  phone  systems  and  software. 

Migrating  from  highly  customized,  well-supported  SAP  software  to  its  own  ERP  system,  how¬ 
ever,  was  a  big  challenge.  Gallus  uses  living  cells  to  make  medications  that  treat  conditions  such  as 
arthritis  and  psoriasis.  It’s  a  highly  regulated  industry,  so  the  transition  really  had  to  be  seamless. 
“We  have  to  track  everything  from  preventative  maintenance  to  cell-performance  data,”  ►  ► 
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THE  EXPERIENCE,  STRATEGIC  ALLIANCES  AND  NETWORK  TO  MAKE  THE  DIFFERENCE 


Verizon  enables  a  robust  suite  of  machine-to-machine  solutions  that  connect 
your  workforce  to  your  assets  for  greater  access  to  critical  business  data.  Our 
expertise  and  capabilities  are  helping  99%  of  the  Fortune  1000  propel  their 
businesses.  And  with  global  leadership  in  4G  LTE,  an  array  of  unique  business 
solution  alliances  and  the  largest  high-speed  wireless  network  in  America, 
Verizon  has  what  it  takes  to  help  your  business  get  ahead. 
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explains  Gallus  CFO  Steven  Kasok.  That  needed  to 
continue  from  the  day  Gallus  signed  the  Johnson  & 
Johnson  deal  right  through  the  day  after  SAP  access  was 
shut  off.  After  all,  says  Kasok,  “the  cells  didn’t  know  they 
were  sold.” 

The  CFO,  who  began  his  career  in  IT  at  GE  and  over¬ 
sees  Gallus’s  technology  function,  knew  the  17-week 
implementation  schedule  was  tight,  particularly  given 
the  company’s  bare-bones  IT  staff.  The  key?  “You  go  with 
a  simple,  non-customized  implementation,”  says  Kasok. 

Kasok  chose  EzPharma,  a  pre-configured  ERP 
package  built  on  SAP,  based  solely  on  the  viability  of 
the  vendor.  “We  have  the  same  regulatory  and  quality 
framework  as  large  pharmaceutical  clients,  so  it  only 
makes  sense  to  run  on  the  same  system  background,” 
says  Kasok.  “The  real  question  is,  Can  you  afford  it?” 

There  is  no  cut-rate  ERP  suitable  for  the  drug  indus¬ 
try,  so  Kasok  bit  the  bullet  on  EzPharma’s  “couple 
million  dollar”  price  tag,  shaving  costs  on  the  implemen¬ 
tation  itself.  He  hired  consultants  from  Answerthink,  an 
SAP  consultancy,  to  manage  the  rollout,  but  used  inter¬ 
nal  staff  on  the  project  as  much  as  possible  and  vetoed 
customization  in  almost  all  cases.  “You  can  make  modest 
changes  in  your  own  operating  systems  to  meet  the  stan¬ 
dards  of  the  off-the-shelf  software,”  Kasok  says. 

Because  Gallus  manufactures  products  for  the  com¬ 
mercial  market,  the  regulatory  bar  is  set  higher  than  it 
is  for  other  manufacturers.  To  meet  its  complex  track¬ 
ing  and  documentation  requirements,  the  company 
required  one  bespoke  element  of  software  to  support 
its  maintenance  and  calibration  tracking  procedures. 
Other  than  that,  what  it  rolled  out  last  year  was  what 
came  in  the  box. 

“It’s  a  big  cultural  shift  to  say,  ‘We’re  going  with  a  stan¬ 
dard  system,”’  says  Kasok.  “The  consultants  would  talk 
about  [making  changes  in]  the  next  phase.  But  I  always 
said,  ‘This  is  the  only  phase.’” 

Master  data  migration  proved  tougher  than  expected, 
says  Kasok,  who  is  more  familiar  with  the  straightfor¬ 
ward  flat  files  of  his  IT  days.  “Intense  data  cleaning 
added  stress— and  about  30  days— to  the  project.” 

“In  an  ideal  world,  we  would  have  implemented  just 
what  we  needed  instead  of  what  [Johnson  &  Johnson] 
already  had,”  Kasok  says.  For  example,  Gallus  will  now 
manage  multiple  customer  inventories.  “We  weren’t  able 
to  do  as  much  up-front  planning  as  we  would  have  liked.” 

“The  reality  is,  there  will  be  more,”  which  Kasok 
admits  sounds  suspiciously  like  a  phase  two.  “We  did 
this  as  cost  effectively  as  possible,  and  the  return  is  a 
business  that  continues  to  run.” 


Stephanie  Overby  is  a  freelance  writer  based  in  Massachusetts. 
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NEAR-FIELD  COMMUNICATION 
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IT'S  CHEAP  AND  EASY.  Near-field  communication 
(NFC)  is  a  short-range  wireless  transmitting  technology 
that  connects  a  smartphone  with  a  receiver  to  transfer 
.data.  NFC's  big  potential  is  in  mobile  payments,  which 
are  convenient  and  cost  saving,  so  they're  attractive  to  users 
and  companies.  Sandy  Shen,  an  analyst  at  Gartner,  says  NFC 
appeals  to  a  variety  of  industries  because  "it  supports  any 
services  that  require  data  transfer  and  authentication." 


2  ADOPTION  SEEMS  INEVITABLE.  Chris  Silva,  an 
analyst  at  Altimeter  Group,  says  NFC  is  the  natural 
next  step  for  smartphones.  But  widespread  adop¬ 
tion  requires  that  more  devices  include  the  tech¬ 
nology  and  more  merchants  support  its  use  for  payment. 
Today,  smartphone  users  make  up  less  than  50  percent  of 
the  mobile  market  and  Apple  and  Android  do  not  yet  offer 
NFC,  though  the  iPhone  5  is  expected  to  include  it.  RIM 
and  Samsung  are  among  its  early  adopters,  but  it's  unclear 
whether  it  can  be  added  to  existing  devices. 


3  IT'S  A  HOT  POTATO  FOR  ENTERPRISES.  Busi¬ 
nesses,  credit  card  companies  and  cell  phone  provid¬ 
ers  are  all  debating  who  should  handle  the  billing. 

"If  your  Verizon  bill  has  [a  charge  for]  coffee  on  it, 
who's  responsible?"  Silva  asks.  Right  now,  service  providers 
and  manufacturers  control  whether  to  include  NFC  on  their 
phones  and  whether  their  billing  systems  process  payments. 
But  IT  in  the  enterprise  will  have  to  sort  out  the  problems 
caused  by  the  personal  use  of  corporate  devices  and  deal 
with  the  liability  that  mobile  payments  could  create.  "From  a 
policy  standpoint,  it's  more  complicated  for  IT,"  Silva  says. 


4 IT'S  ALREADY  IN  USE  OVERSEAS.  Silva  says  NFC  is 
taking  off  quicker  outside  the  United  States  and  west¬ 
ern  Europe.  For  example,  in  Japan,  people  use  a  form 
of  NFC  called  FeliCa  to  pay  with  their  phones,  and  the 
purchases  appear  on  their  phone  bills.  In  the  United  States, 
billing  agreements  between  vendors  and  credit  card  compa¬ 
nies  have  caused  conflict.  Thomas  Husson,  an  analyst  at  For¬ 
rester  Research,  adds  that  the  technology  is  performing  well 
in  Japan  in  part  because  mobile  providers  offer  discounts  on 
NFC  phones  to  consumers. 


5 SECURITY  RISKS  COME  STANDARD.  People  will 
lose  devices,  which  is  NFC's  biggest  security  risk  and, 
Silva  says,  a  big  barrier  to  consumers  adopting  NFC. 
Arizona  State  University  recently  explored  using  NFC- 
enabled  smartphones  as  dorm  keys,  and  it  sees  potential  for 
both  big  savings  and  security  concerns.  Next  it  will  test  secu¬ 
rity  improvements,  such  as  the  credentials  app  timing  out 
after  30  seconds.  (For  more  on  NFC  security,  see  "Bad  News 
for  Google  Wallet,"  Page  26.)  -Lauren  Brousell 
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Your  Rivals 
May  Share 
Secrets  on 


For  several  years,  companies  have 
used  software  tools  to  monitor 
what  people  say  about  them  in 
social  media.  The  new  twist:  Com¬ 
panies  are  tapping  the  social  media 
stream  to  learn  valuable  infor¬ 
mation  about  competitors,  says 
Richard  Plansky,  senior  managing 
director  at  Kroll,  a  risk  consultancy 
that  offers  corporate  intelligence 
programs. 

"Social  media  moves  a  large 


portion  of  what  used  to  be  private 
information  into  the  public  sphere," 
says  Plansky.  "And  that  makes  it 
much  easier  to  gather  information 
about  companies'  activities." 

Product  specifications,  prod¬ 
uct  testing,  promotional  offers, 
financial  data,  recruitment  efforts, 
layoffs,  industry  demographics  and 
customer  satisfaction  levels  are 
just  some  of  the  details  that  can  be 
gleaned  from  Facebook  profiles, 
Twitter  feeds  and  blog  posts. 

"A  lot  of  the  data  is  innocuous  in 
little  chunks,  but  when  combined 
with  lots  of  other  tiny  pieces  of 
information,  it  gives  you  a  real 
big  window  into  a  company,"  says 
Shane  MacDougall,  a  partner  at  Tac¬ 
tical  Intelligence,  a  consultancy. 

However,  compiling  those 
details  is  meaningless  if  a  company 


doesn't  know  how  to  sort  through 
them  with  a  strategic  goal  in  mind. 

"It's  really  about  good  analysis 
that  draws  you  to  a  very  singular, 
unique  or  eye-popping  solution 
that  will  allow  you  to  make  a  deci¬ 
sion  a  little  faster  and  a  little  bet¬ 
ter  than  your  competition,"  says 
Leonard  Fuld,  founder  of  Fuld  and 
Co.,  a  competitive  intelligence  con¬ 
sultancy. 

Experts  agree  that  the  hardest 
part  of  mining  social  networks  is 
avoiding  information  overload. 

"You  have  to  decide  what  are  the 
key  things  that  you  really  want  to 
know  about  your  competitors-and 
what  things  you're  not  going  to 
watch  right  now,"  says  Lisa  Dreher, 
a  vice  president  of  marketing  at 
Logicalis,  a  systems  integrator. 

-Cindy  Waxer 
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Government  IT's  'Perfect  Storm' 

Budgetary  concerns  and  cloud  computing  have  combined  to  make  sharing 
services  across  government  agencies  a  reality  by  kenneth  corbin 


Federal  tech  chiefs  have  long  envi¬ 
sioned  an  environment  in  which 
agencies’  storage  and  applications 
are  hosted  and  shared  throughout  the 
government.  But  now  officials  are  lay¬ 
ing  the  policy  foundation  for  a  major 
cloud  migration  over  the  next  several 
years,  according  to  David  McClure, 
the  associate  administrator  of  the 
General  Services  Administration’s 
Office  of  Citizen  Services  and  Inno¬ 
vative  Technologies. 

“We’ve  been  trying  this  for  the 
last  couple  decades,”  McClure  said 
in  remarks  at  the  Software  and  Infor¬ 
mation  Industry  Association’s  annual 
Cloud/Gov  conference. 

“I  think  we  now  have  a  perfect 
storm.  We  have  a  budget  crisis,  a  new 
wave  of  technology  and  a  new  genera¬ 
tion  of  CIO  and  IT  leadership  in  the 
federal  government  that  is  very  open 
to  this,”  he  said. 

McClure  is  one  of  the  driving 
forces  behind  FedRAMP,  the  federal 


government’s  program  to  develop 
a  uniform  framework  for  federal 
cloud  solutions,  dealing  with  the 
security,  assessment,  privacy  and 
procurement  considerations  of  new 
deployments. 

FedRAMP,  with  its  “do  once,  use 
many  times”  mantra,  is  in  the  pre¬ 
launch  phase.  The  initial  phased  roll¬ 
out  is  scheduled  to  begin  in  June. 

Several  government  bodies  are 
collaborating  to  develop  the  initiative, 
including  the  Departments  of  Defense 
and  Homeland  Security,  the  CIO 
Council  and  the  National  Institute  of 
Standards  and  Technology  (NIST). 

McClure  says  developing  a  com¬ 
mon  set  of  controls  for  cloud  services 
across  departments  and  agencies  is 
FedRAMP’s  first  priority,  though  the 
project  is  not  seeking  to  rewrite  the 
security  standards  stipulated  by  NIST 
and  the  Federal  Information  Security 
Management  Act  (FISMA). 

Instead,  FedRAMP  aims  to  put 


an  end  to  the  current  situation  in 
which  each  agency  contorts  the  exist¬ 
ing  standards  to  suit  its  own  ends, 
thereby  achieving  compliance  but 
falling  short  of  the  common  IT  secu¬ 
rity  framework  that  NIST  and  FISMA 
attempted  to  create. 

The  push  to  migrate  to  the  cloud 
comes  with  an  ambitious  effort  to 
consolidate  federal  data  centers, 
reducing  the  government’s  IT  capital 
and  operating  expenses  while  making 
the  technology  apparatus  more  envi¬ 
ronmentally  friendly. 

FedRAMP  will  also  seek  to  estab¬ 
lish  a  group  of  third-party  assess¬ 
ment  organizations  that  will  evaluate 
cloud  solutions  slated  for  govern¬ 
ment  deployment.  Once  in  place,  the 
systems  deployed  under  FedRAMP 
will  be  subject  to  monitoring  by  the 
Department  of  Homeland  Security. 


Kenneth  Corbin  is  a  freelance  writer 
based  in  Washington,  D.C. 


Amazon  Cuts  Cloud  Prices  to  Stay  Competitive 


Amazon  Web  Sen/ices  (AWS)  has  cut  its  prices  for  the  19th  time  in 
six  years  in  a  bid  to  fend  off  competition  from  the  likes  of  Micro¬ 
soft  Azure  and  Rackspace. 

"AWS  works  hard  to  lower  our  costs  so  we  can  pass  those  sav¬ 
ings  back  to  our  customers,"  the  company  said  in  a  blog  post  last 
month.  "We  look  to  reduce  hardware  costs  and  innovate  in  many 
other  areas  of  our  business  so  we  can  be  more  efficient." 

This  has  resulted  in  a  "significant  price  decrease"  for  Amazon's 
Elastic  Compute  Cloud  (EG?),  Relational  Database  Service  (RDS), 
ElastiCache  and  Elastic  MapReduce,  the  blog  post  continued. 

While  Amazon,  like  other  cloud  infrastructure  service  providers, 
allows  users  to  purchase  computing  power  by  the  hour,  it  also 
offers  Reserved  Instances,  where  in  exchange  for  paying  for  a  lon¬ 
ger  fixed  term,  customers  get  lower  pricing. 

The  new  price  cuts  vary  according  to  geographic  region,  with 
costs  for  EG?  Reserved  Instances  falling  up  to  37  percent.  On- 


demand  pricing  will  see  a  more  modest  cut  of  up  to  10  percent. 

Meanwhile,  costs  of  new  Reserved  Instances  of  Amazon  RDS, 
which  provides  a  scalable  relational  database  powered  by  either 
MySQL  or  Oracle,  will  drop  up  to  42  percent,  while  on-demand 
pricing  will  be  lowered  by  up  to  10  percent.  Also  announced  were 
price  changes  aimed  at  large  enterprises. 

"One  misperception  is  that  while  EC2  is  a  phenomenal  deal 
for  smaller  businesses,  the  cost-benefit  [ratio]  may  diminish  for 
large  customers  who  achieve  scale,"  the  blog  states.  "Those  who 
take  the  time  to  run  the  numbers  see  significant  cost  advantages 
regardless  of  the  size  of  their  operations." 

To  support  this,  AWS  is  rolling  out  an  option  called  Reserved 
Instance  Volume  Tiers.  If  you  own  more  than  $250,000  of 
Reserved  Instances,  you  qualify  for  a  10  percent  discount,  while 
more  than  $2  million  qualifies  you  for  a  20  percent  discount. 

-Chris  Kanaracus 
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Benny  Kirsh 

VICE  PRESIDENT  AND  CIO, 
INFOBLOX,  INC. 

Benny  Kirsh,  vice-president 
and  CIO  of  infoblox,  previ¬ 
ously  held  several  Executive 
CIO  positions  and  was  directly 
responsible  for  the  success¬ 
ful  implementation  of  major 
transformation  projects.  As 
CIO  of  The  Cooper  Companies, 
he  led  a  team  of  IT  profession¬ 
als  and  was  responsible  for 
all  Global  IT  strategic  planning 
and  execution.  Prior  to  that,  he 
was  the  first  CIO  at  Kyphon, 
where  he  was  responsible  for 
building  a  growth-focused  IT 
foundation. 
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faster  time  to  value,  check  out  the 
Webcast  "The  CIO's  view:  Time 
to  Value  through  Automation" 
at  www.cio.com/webcasts/ 
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The  CIO's  View:  Delivering 
Time  to  Value  Through  Automation 


In  August  2011,  Benny  Kirsh  was  named  VP 
and  CIO  at  Infoblox,  an  industry-leading  de¬ 
veloper  of  network  infrastructure  automation 
and  control  solutions.  With  more  than  25  years 
of  experience,  Kirsh  is  responsible  for  driving 
strategic  advancements  via  the  company’s  IT 
infrastructure  and  applications.  Now  more 
than  ever  before,  IT  professionals  like  him 
are  being  asked  to  deliver  strategic  value  by 
responding  quickly  to  dramatically  chang¬ 
ing  business  demands.  But  in  today’s  tight 
economy,  they  must  do  so  with  flat  budgets 
and  staffing  levels.  IDG  recently  sat  down  with 
Kirsh,  who  explained  how  corporations  can 
meet  those  conflicting  business  imperatives. 

Time  to  Value  has  become  a  catchphrase  in 
IT  today.  What  does  the  term  mean  to  you? 

Traditionally,  IT  has  enabled  companies  to 
change  the  way  they  do  business.  Invest¬ 
ments  in  IT  were  high,  with  cutting  costs  and 
a  positive  ROI  as  the  main  objectives.  Now, 


They  expect  the  same  level  of  responsiveness 
from  IT.  Second,  technology  is  becoming 
more  complex,  so  we  must  constantly  sim¬ 
plify  the  management  of  our  systems.  Third, 
because  of  changing  business  needs,  IT  is 
required  to  do  more  with  less.  And  finally,  we 
are  expected  to  provide  a  high  level  of  quality 
solutions  fast  enough  to  support  new  business 
initiatives.  Balancing  all  these  different  drivers 
requires  us  to  be  more  creative  and  innovative. 

How  is  automation  beneficial  in  improving 
your  ability  to  deliver  Time  to  Value? 

Automation  speeds  up  Time  to  Value.  The 
biggest  benefit  is  to  the  network.  Infoblox’s  so¬ 
lution  successfully  reduced  the  complexity  of 
our  network  and  consolidated  all  the  informa¬ 
tion  gathered  from  different  network  devices 
and  different  vendors  onto  one  pane  of  glass 
for  our  network  engineers  to  work  with.  In  the 
past,  experienced  network  engineers  had  to 
perform  routine,  time-consuming  mainte- 


“Automation  is  key  to  realizing  faster  Time  to  Value  ” 


the  focus  is  on  getting  projects  done  faster, 
meaning  shortening  lead  times  and  respond¬ 
ing  to  changing  business  needs  speedily.  With 
businesses  promoting  themselves  in  dynamic 
ways,  IT  has  to  be  agile  enough  to  accom¬ 
modate  rapid  changes.  In  the  past,  a  rollout 
of  solutions  was  a  periodic  event  with  long 
lead  times.  Today,  public  and  private  clouds 
and  the  consumerization  of  IT  have  changed 
expectations.  So  for  us  CIOs,  Time  to  Value 
means  rolling  out  systems  and  new  solutions 
faster  with  shorter  lead  times  —  while  remain¬ 
ing  focused  on  cutting  costs.  As  a  business 
partner,  IT  has  to  understand  the  needs  of  the 
business  and  stay  ahead  of  the  curve,  intro¬ 
ducing  new  technology  as  needed  and  being  a 
catalyst  for  change  within  the  corporation. 

As  a  CIO,  what  are  the  challenges  you  face 
in  delivering  Time  to  value? 

The  four  challenges  are  quite  clear.  First,  busi¬ 
ness  units’  expectations  are  increasing.  During 
lunch,  employees  download  an  app  from  the 
cloud  for  $50,  and  they  are  up  and  running. 


nance  activities,  such  as  upgrades  or  bug  fix¬ 
ing.  Increased  automation  lets  us  hand  these 
tasks  to  our  junior  engineers  and/or  the  IT 
support  group,  freeing  up  senior  staff  to  work 
on  more  strategic  initiatives.  That  drives  costs 
down  and  delivers  a  better  Time  to  Value. 

Please  tell  us  about  your  experience  imple¬ 
menting  automation  at  Infoblox. 

By  embracing  the  private  cloud  for  speedy 
deployment  of  computer  power,  we  are  pro¬ 
viding  the  Engineering  department  with  the 
capability  of  self-provisioning  virtual  servers 
without  IT  involvement.  Using  the  private 
cloud  in  IT,  we  recently  deployed  a  new  re¬ 
porting  tool  that  would  previously  have  taken 
weeks.  Now,  thanks  to  virtualization  and 
the  automated  provisioning  of  IP  addresses 
provided  by  the  Infoblox  solution,  it  took  just 
days.  The  move  from  manual  processes  to 
self-provisioning  has  enabled  the  IT  team  to 
support  our  organization's  changing  business 
requirements.  Automation  is  key  to  realizing 
faster  Time  to  Value. 


COVER  STORY  ::  Fraud 


CIOs  rarely  discover  the  insider  crime  that  can  ruin  companies. 

Here's  what  needs  to  change. 

BY  KIM  S.  NASH 


Yuan  Li  knew  what  she  wanted  and  how  to  get  it.  For  32 
months,  starting  in  October  2008,  the  29-year-old  research 
chemist  at  Sanofi-Aventis  downloaded  trade  secrets  from  the 
pharmaceutical  firm.  Li  had  worked  for  Sanofi,  which  makes 
the  allergy  pill  Allegra  and  sleeping  pill  Ambien,  for  more 
than  two  years  when  she  started  to  steal  data.  Her  target:  five 
chemical  compounds  that  the  company  had  kept  secret  for 
possible  use  in  future  drugs. 

She  knew  which  database  to  query  to  download  the  infor¬ 
mation  to  her  work  laptop,  and  from  there  she  emailed  it  to  a 
personal  account.  Sometimes,  she  loaded  a  USB  flash  drive 
with  material.  Li,  a  Chinese  national,  then  put  the  informa¬ 
tion  up  for  sale  through  a  pharmaceutical  company  that  she 
partially  owned,  whose  parent  is  based  in  China. 

Sanofi  helped  investigators  from  the  FBI  and  the  U.S.  attor¬ 
ney  in  New  Jersey  to  prosecute  Li.  In  January,  she  pleaded 
guilty  to  theft  of  trade  secrets  and  is  due  to  be  sentenced  this 
month.  She  faces  up  to  10  years  in  jail  and  a  $250,000  fine. 

Sanofi  declines  to  be  interviewed  about  the  technology  and 
policies  it  uses  to  detect  and  prevent  corporate  crime,  including 
Li’s  long-term  theft.  “The  measures  we  had  in  place  actually 
contributed  to  the  successful  outcome  of  this  particular  case, 
and  we  are  continuously  looking  for  ways  to  improve  security,” 
a  spokesman  said  in  an  emailed  statement. 


Experts  say  this  is  a  textbook  example  of  insider  crime  and, 
perhaps,  of  IT  failure.  Just  as  no  one  knows  what  goes  on  inside 
someone’s  marriage,  outsiders  can’t  say  with  certainty  what 
goes  into  someone  else’s  IT  strategy.  Sanofi  could  have  done 
everything  right  and  still  been  victimized.  That  happens. 

But  too  often  in  cases  of  insider  crime,  basic  technology  safe¬ 
guards  are  ignored  or  missing.  CIOs  can’t  be  proud  to  learn 
that  of  11  methods  of  detection  identified  in  1,843  recent  fraud 
cases  studied  by  the  Association  of  Certified  Fraud  Examin¬ 
ers  (ACFE),  IT  controls  came  in  dead  last.  They  are  the  least 
likely  means  of  identifying  wrongdoing,  responsible  for  just 
0.8  percent  of  cases,  the  ACFE  says.  It’s  more  common  to  find 
out  by  accident  (8  percent),  from  the  police  (2  percent)  or  even 
by  confession  from  the  perpetrator  (1  percent).  Tip-offs  are  by 
far  the  most  common  way  authorities  discover  corporate  crime, 
at  40  percent.  Those  findings  have  been  consistent  for  a  decade. 

There  are  many  reasons  that  IT  falls  down  on  the  job.  For 
one  thing,  most  corporate  systems  aren’t  designed  from  the 
outset  with  fraud  surveillance  in  mind.  Plus,  throwing  a  lot 
of  money  and  people  at  fraud  prevention  doesn’t  get  senior 
executives  excited.  Conventional  wisdom  has  it  that  the  tighter 
the  controls,  the  less  efficient  the  company.  Company  leaders 
therefore  decide  to  accept  some  financial  loss  through  crime 
as  a  cost  of  doing  business. 
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ould  You  Speak  Up? 


A  consultant  says  CIOs  may  be  hesitant 
to  report  suspicious  activity 

Why  don't  CIOs  turn  in  more  insider  criminals?  No  one  suggests  that 
CIOs  routinely  cover  up  corporate  crime,  but  management  pressures  may  inhibit 
CIOs  from  acting  on  their  suspicions  early  in  a  fraud  scheme. 

It's  rare  to  happen  upon  a  digital  smoking  gun  that  incontrovertibly  proves  a 
corporate  crime.  It's  later,  during  a  formal  investigation  once  auditors  know  what 
they're  looking  for,  that  the  obviously  damning  evidence  is  uncovered.  Early  on, 
though,  a  CIO  might  notice  something  amiss.  Perhaps  a  network  activity  log  shows 
unusual  patterns  or  some  entries  in  the  general  ledger  look  off.  CIOs  may  hesitate 
to  step  forward,  feeling  they  don't  know  enough  about  the  intimate  workings  of 
finance,  saysjim  Anderson,  a  management  consultant  at  Blue  Elephant  Consulting. 

"They  think,  'I'm  probably  wrong.  I  probably  just  don't  understand  it,"' Anderson 
says.  He  adds  that  such  self-doubt  may  be  more  common  in  CIOs  who  report  to 
CFOs,  which  is  about  23  percent,  according  to  our  annual  State  of  the  CIO  survey. 

Also,  bringing  up  vague  concerns  could  mar  the  relationship  between  the  CIO 
and  whomever  he  tells— and  certainly  whomever  he  accuses,  Anderson  says.  To 
avoid  that,  the  CIO  might  sweep  aside  his  ideas  and  assume,  like  so  many  pro¬ 
fessionals  do,  that  internal  and  external  auditors  will  catch  anything  untoward. 

Finally,  many  companies  lack  a  clear  process  for  reporting  suspected  wrong¬ 
doing.  It  may  seem  obvious  that  someone  should  go  to  a  manager  or  the  human 
resources  department,  even  the  CEO.  But  without  a  well-known  policy  for  how 
to  handle  the  situation,  some  employees-even  CIOs— will  do  nothing,  Anderson 
says.  If  someone  is  busy  with  everyday  work  and  unsure  of  himself  already,  he 
says,  "the  issue  just  dies."  -K.5.N. 


And  to  their  detriment,  companies  often 
split  the  task  of  fraud- fighting  among  siloed 
groups.  Internal  audit  does  one  thing;  com¬ 
pliance  does  another.  IT  supports  the  silos, 
but  there’s  no  coherent,  companywide  plan, 
says  Paul  McCormack,  an  investigator  and 
executive  vice  president  at  Connectics,  a 
fraud-prevention  consultancy. 

Choosing  a  combination  of  technologies 
and  policies  to  thwart  the  darker  parts  of 
human  nature  requires  a  continuous  risk- 
benefit  calculation.  CIOs  can  change  the 
equation  with  new  thinking  and  new  tech¬ 
nology,  starting  by  promoting  the  notion 
that  fraud  prevention  is  everyone’s  business, 
says  Marshall  Romney,  a  professor  of  infor¬ 
mation  systems  at  Brigham  Young  Univer¬ 
sity  who  has  studied  corporate  fraud  for 
three  decades.  For  CIOs,  that  means  spread¬ 
ing  the  word  that  detection  and  prevention 
don’t  have  to  make  a  company  less  agile. 

And  anti-fraud  efforts  are  far  more 
effective  if  major  IT  systems  are  configured 
with  surveillance  and  analysis  capabilities 
from  the  start.  Advances  in  big  data  analyt¬ 
ics,  meanwhile,  let  CIOs  create  systems  to 
sift  through  billions  of  transactions,  cus¬ 
tomer  interactions  and  employee  activi¬ 
ties  to  spot  the  buds  of  corporate  crime 
before  it  blooms.  Specialized  vendors  such 
as  FICO,  Fiserv  and  NICE  Actimize  use 
neural  networks  and  scenario  matching  to 
detect  financial  crimes,  a  $2.9  billion  soft¬ 
ware  market  expected  to  grow  8  percent  per  year  though  2015, 
according  to  research  company  IDC.  IBM,  SAS  and  other  enter¬ 
prise  players  also  offer  some  fraud-management  capabilities. 

To  make  the  best  use  of  such  tools,  CIOs  must  elevate  the 
discussion  of  fraud  fighting,  pouring  much  more  detailed  infor¬ 
mation  into  the  risk-benefit  analysis,  Romney  says.  Involve 
all  departments— especially  operations,  audit  and  legal— to 
consider  factors  such  as  economic  conditions,  business  out¬ 
look  and  the  cost  of  the  programs  in  hard  dollars,  he  advises. 
Make  informed  decisions  about  the  loss  of  business  agility  that 
security  technology  can  bring.  Realize  that  what  works  in  one 
industry  won’t  in  another.  And  that  each  CIO  must  deal  with 
his  company’s  proclivities. 

“This  is  a  high-level  conversation  that  has  to  go  all  the  way 
to  the  board  and  CEO,”  Romney  says.  CIOs  who  balance  these 
variables  can  stop,  prevent  and  maybe  even  predict  insider  crime, 
saving  serious  money  and  avoiding  immeasurable  damage  to  the 
company.  But  first  they  must  reform  some  outmoded  approaches. 

Billions  Lost,  Poof,  Gone 

Humans  think  up  all  sorts  of  crime,  from  stashing  office 
supplies  in  a  briefcase  to  hiding  money  under  layers  of  com¬ 
plex  computerized  investment  transactions.  “If  you  operate 
as  a  company,  you  will  have  fraud,”  says  McCormack,  who 


has  worked  on  cases  at  Delta  Air  Lines,  Ernst  and  Young, 
PricewaterhouseCoopers  and  SunTrust  Banks.  “I’ve  yet  to  meet 
any  C-level  person  who  says,  ‘I’m  so  proud  that  we  have  500 
people  preventing  fraud.’  It’s  not  what  people  want  to  put  out 
there  as  a  badge  of  honor.  It’s  a  necessary  evil.” 

The  Sarbanes-Oxley  Act,  enacted  in  2002,  was  supposed  to 
stop  a  lot  of  big  crime  by  giving  internal  and  external  auditors 
new  and  more  detailed  safeguards,  procedures  and  processes  to 
check.  The  regulations  encode  good  base-covering  practices  and 
serve  as  a  proxy  for  good  behavior.  Lawmakers  had  an  appetite 
for  reform  after  colossal  crimes  at  Enron,  HealthSouth  and  other 
companies  outraged  the  public,  especially  employees  of  those 
companies  whose  salaries  and  pensions  were  swindled  away. 

But  10  years  on,  we  have  a  new  crop  of  corporate  miscreants 
at  whom  to  rage.  Investor  Bernie  Madoff,  now  serving  150  years 
in  jail,  confessed  in  2009  to  a  Ponzi  scheme  that  defrauded 
customers  of  perhaps  $50  billion  or  more.  Last  September, 
investment  bank  UBS  blamed  a  $2  billion  loss  on  a  rogue  trader 
who  was  charged  with  fraud  and  false  accounting.  The  trader 
pleaded  not  guilty  and  is  scheduled  for  trial  this  September. 

Maxim  Healthcare  Services  recently  admitted  to  $61  mil¬ 
lion  in  Medicaid  fraud  and  agreed  pay  a  fine  of  $150  million  to 
the  federal  government  and  42  states.  Afterward,  the  company 
replaced  all  its  senior  executives,  including  the  CIO. 
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Sarbanes-Oxley  may  have 
curbed  some  would-be  crimi¬ 


nals,  but  companies  over-rely  on 
auditors  to  detect  crime,  McCor¬ 
mack  says.  But  CIOs  can  make  a 
dent  by  aiming  technology  and 
policy  tools  at  common  kinds  of 
insider  threats,  he  says. 

Of  all  the  types  of  internal 
fraud,  theft  of  assets— office  sup¬ 
plies,  computer  equipment  and 
so  on— is  the  least  costly  but  still 
significant,  according  to  ACFE 
research.  Losses  in  the  average 
case  amount  to  $135,000,  the 
ACFE  says.  Corruption  schemes, 
such  as  bid  rigging  and  kick- 
backs,  cost  $250,000  on  aver¬ 
age.  Financial  statement  fraud 
does  the  most  damage,  with  each 
case  responsible  for  $4  million 
in  losses  on  average. 

Technology  can  help,  but 
CIOs  should  not  hand  off  the 
job  to  project  managers  doing 
piecemeal  work,  says  Frank 
Wander,  a  former  CIO  at  Guard¬ 
ian  Life  Insurance,  The  Harry 
Fox  Agency  and  the  Prudential 
Institutional  Division.  Instead, 
make  fraud  detection  and  pre¬ 
vention  an  organizational  man¬ 
date  exemplified  by  the  ethical, 
upright  behavior  of  top  execu¬ 
tives,  Wander  says.  “People  do 
what  you  do.  That’s  how  the  world  really  works.” 

'Tone  at  the  Top' 

If  people  get  the  idea  that  senior  leaders  don’t  pay  attention  to 
wrongdoing— or  worse,  take  liberties  themselves— they  will  go 
along,  says  Jim  Anderson,  a  management  consultant  at  Blue 
Elephant  Consulting.  Ethics,  Anderson  says,  is  nothing  more 
than  daily  decision-making  in  big  and  small  situations.  Rarely 
does  anyone  face  a  “burning  building”  quandary  where  there’s 
no  doubt  as  to  the  right  answer. 

“If  you’re  sitting  in  your  cube  and  some  strange  guys  with 
sunglasses  show  up  with  metal  suitcases  full  of  $20  bills,  you’d 
say  no,”  he  says.  “But  what  happens  instead  is  that  ethical  deci¬ 
sions  sneak  in  around  the  corners  of  our  average  day.” 

Maybe  an  employee  is  late  with  a  project  and  downloads 
data  to  bring  home  to  work  over  the  weekend,  Anderson  says. 
The  employee  knows  he  shouldn’t  because  the  information  is 
confidential,  but  he  figures  he’s  breaking  the  rules  for  the  right 
reasons.  Months  later,  maybe  the  job  is  going  sour,  so  he  takes 
data  to  be  able  to  defend  himself  in  a  poor  performance  review. 
Each  time,  no  one  says  anything  about  his  actions.  Maybe 
they’re  not  looking  at  network  logs;  maybe  they  don’t  care. 


Ten  years  ago,  combatting  internal 
fraud  wasn't  part  of  the  CIO's  job, 
says  Kim  Johnson,  CIO  at  Graham 
Group.  ^*4t  now  he  says  CIOs  must  get 
din  IT  fraud  controls. 


Then  things  get  hostile  between  the  employee  and  the  com¬ 
pany,  and  he  takes  the  work  he’s  done,  intending  to  quit  and  find 
work  at  a  competitor.  “It’s  a  snowball,”  Anderson  says.  “It’s  the 
first  ethical  lapse  that  will  cause  all  the  problems  down  the  road.” 

Wander,  who  recently  founded  the  consultancy  IT  Excel¬ 
lence  Institute,  agrees.  “Companies  that  have  trouble  don’t  have 
the  right  tone  at  the  top,”  he  says,  adding  that  CIOs  can  influ¬ 
ence  culture  many  ways. 

For  example,  at  the  quarterly  town  hall  meetings  Wander 
held  with  Guardian’s  IT  staff,  he  regularly  focused  on  security 
issues  and  safeguarding  company  data.  “Every  individual  knew 
it  was  a  divisional  priority,”  he  says.  A  CISO  worked  alongside 
Wander,  not  reporting  to  him,  to  spread  understanding  of  the 
issues  across  departments.  Companies  that  separate  the  roles 
this  way  also  balance  responsibility  for  the  protection  of  cor¬ 
porate  assets,  he  says.  If  too  much  falls  to  the  IT  group,  other 
departments  may  get  lax  or  get  the  idea  that  ethics  isn’t  part  of 
their  job.  “Address  [anti-fraud  efforts]  in  people’s  reviews  so 
they  understand  they  are  responsible.” 

A  Neighborhood  Watch  mentality  at  work  helps  cut  criminal 
activity,  says  Carl  Tidwell,  CIO  of  the  American  Type  Culture 
Collection  (ATCC),  a  nonprofit  research  center  that  supplies 
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microorganisms  and  other  materials  to  life  sciences  research¬ 
ers.  Tidwell  says  he  tries  to  educate  employees  about  warn¬ 
ing  signs,  such  as  people  struggling  with  finances  or  living 
beyond  their  means.  That’s  evidence  that  humans  can  see  but 
computers  can’t,  such  as  the  former  controller  of  a  Pittsburgh 
car  dealership  who  enjoyed  a  mink  coat,  10  cars,  four  homes, 
gold  bullion  and  a  $32,500  lunch  catered  by  Food  Network  star 
Ina  Garten.  Over  six  years,  the  controller  falsified  accounting 
records,  transferring  $10.2  million  from  the  dealership  to  her 
personal  bank  accounts  in  800  transactions.  She  pleaded  guilty 
in  January  to  wire  fraud  and  is  due  to  be  sentenced  in  May.  The 
dealership  did  not  respond  to  requests  for  comment. 

Even  when  companies  insert  IT  controls  into  their  busi¬ 
ness  processes,  they  too  frequently  fail  to  monitor  them,  says 
Matt  Lynch,  a  fraud  investigator  who  has  worked  at  Altria 
Group,  a  $21.4  billion  cigarette  company,  and  Palmetto  GBA, 
which  administers  benefits  for  Medicaid  and  Medicare.  Real 
live  human  beings  from  IT,  audit,  legal  or  other  groups  should 
be  assigned  to  look  at  transactions  randomly,  he  says.  Often  a 
business  that’s  making  money  doesn’t  bother  with  too  much 
introspection,  he  says.  Or  executives  don’t  want  to  think  crime 
happens  at  their  place.  “They  think,  ‘These  are  people  I  work 
with  and  I  trust,”’  he  says.  “I’m  sorry,  but  a  lot  of  people  trusted 
Bernie  Madoff.  Fraud  is  just  a  fact.” 


Instilling  outright  fear,  however,  works  against  you  because 
employees  become  secretive  and  suspicious  of  each  other,  inhib¬ 
iting  collaboration  and  stalling  productivity,  says  investigator 
McCormack.  A  little  trepidation,  however,  can  be  helpful.  Show 
employees  how  serious  you  are,  he  advises.  Write  policies  that 
explain  what  people  can  and  can’t  do  with  company  data  and 
other  material.  Create  anti-fraud  training  and  give  programs  at 
least  twice  per  year.  Have  employees  sign  confidentiality  agree¬ 
ments,  he  suggests.  “Establish  a  tone  and  set  of  expectations  as 
soon  as  people  walk  in  the  door  so  they  know  what  the  com¬ 


pany  does  to  stop  fraud  and  that  they  will  be  caught,”  he  says. 

The  most  damaging  thing  leaders  do  is  keep  quiet  when 
something  goes  wrong,  he  says.  Routinely  monitor  the  move¬ 
ment  of  large  or  sensitive  data  sets  around  the  network  and  spot- 
check  where  they’re  going.  “All  it  takes  is  examining  a  couple 
of  those  transactions  and  then  talking  to  people  about  it.  Word 
gets  around.” 

Technology  to  Close  Holes 

Word  also  travels  when  an  organization  leaves  itself  vulnerable 
by  skimping  on  basic  IT  controls.  Some  people  will  take  advan¬ 
tage  of  what  you  didn’t  do,  Tidwell  says.  He  remembers  well 
what  happened  at  a  former  company.  He  suggested  to  the  CEO 
that  IT  block  computer  ports,  so  employees  couldn’t  use  por¬ 
table  drives,  and  monitor  email  for  large  data  transfers.  “I  was 
told,  ‘No,  we  trust  our  employees,”’  Tidwell  recalls.  Soon  after, 
a  researcher  quit,  walking  away  with  $300,000  to  $400,000 
worth  of  intellectual  property  that  he  had  sent  to  a  personal 
email  account— a  delivery  method  similar  to  the  one  the 
researcher  at  Sanofi  used.  This  researcher,  however,  got  a  job 
at  a  competitor  and  started  work  using  the  stolen  information. 

The  rival  notified  Tidwell’s  company.  “They  packed  up 
everything,  including  his  computer,  and  sent  it  to  us,”  he  says. 
“The  CEO  was  apologetic  [to  me]  afterwards.  He  dodged  a  bullet 
because  the  competitor  was  an  ethical  company.” 

CIOs  can  use  IT  to  reinforce  and  extend  policies 
and  behavior  that  promote  an  ethical  culture.  Wan¬ 
der’s  philosophy  is  one  of  minimum  access.  “You 
want  people  to  have  the  least  privilege  to  get  done 
what  they  have  to  get  done,”  he  says. 

A  CIO’s  hands  are  tied  if  a  CEO  thinks  IT  con¬ 
trols  are  intrusive.  But  new  technologies  can  obvi¬ 
ate  the  need  to  outlaw  some  practices,  Tidwell  says. 
At  ATCC,  he  is  exploring  virtualization,  which 
means  flash  drives  won’t  be  an  issue,  as  central 
servers  provide  data  to  authorized  users  on  thin 
clients.  There  will  be  no  USB  ports  on  the  client 
hardware,  and  employees  will  be  able  to  share 
secured  data.  Productivity  won’t  be  hampered,  he 
says,  and  senior  leaders  won’t  look  heavy-handed. 

As  employees  themselves  bring  new  technol¬ 
ogy  to  work,  especially  smartphones  and  tablets, 
detailed  and  constant  education  can  help  mitigate 
the  risks  that  come  with  these  new  devices,  says 
Stephen  Laster,  CIO  of  Harvard  Business  School. 

For  example,  his  IT  group  creates  artistic  infor¬ 
mational  posters  to  hang  in  common  areas  where 
personnel  gather.  Recent  posters  focused  on  three  ways  to 
secure  a  smartphone:  use  a  password,  enable  location  detec¬ 
tion  so  you  can  find  a  lost  device,  and  enable  remote  wiping  of 
its  data.  Those  measures  help  protect  a  company’s  information 
should  the  device  be  lost  or  stolen.  “Training  is  episodic.  You 
need  a  continuous,  engaging  marketing  campaign,”  Laster  says. 

At  Graham  Group,  a  $1.8  billion  construction  company, 
CIO  Kim  Johnson  has  tried  to  set  up  systems  so  that  emailing 
large  chunks  of  data  to  each  other  isn’t  the  normal  way  to  work. 
The  company  recently  began  developing  a  collaboration  and 


Red  Flags  of  a  Perpetrator 

Looking  back  at  fraud  cases,  investigators  saw  that  criminals  showed 
warning  signs  before  and  during  their  crimes.  Here  are  the  top  five: 


43% 


Living  beyond  their  means 

Financial  difficulties 

■  M  H— BB  SB  23% 

Control  issues,  unwillingness  to  share  duties 

■■■■■■  22% 

Unusually  close  association  with  vendor  or  customer 

mmimmm  19% 

Wheeler-dealer  attitude 


36% 


SOURCE:  THE  ASSOCIATION  OF  CERTIFIED  FRAUD  EXAMINERS  STUDY  OF  1,843  FRAUD  CASES  IN  2008  AND  2009 
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workflow  system  from  SAP,  in  part  to 
eliminate  the  need  for  executives  to  sign 
off  on  major  contracts  via  paper  or  email. 
The  system  also  helps  employees  work 
together  on  sensitive  projects  without 
having  to  send  files  to  each  other.  “Fraud 
prevention  is  built  in  during  the  design 
of  IT  systems,”  Johnson  says. 

Graham  Group  is  also  installing  SAP 
financial  applications  this  year.  As  soon 
as  the  idea  germinated  to  buy  and  cus¬ 
tomize  the  software,  Johnson  requested 
that  a  key  person  from  the  internal  con¬ 
trols  committee  participate  in  the  design 
and  configuration.  He  and  the  CEO 
wanted  to  weave  anti-fraud  measures 
into  the  software  beyond  what  comes 


will  be  suspended  pending  confirmation 
from  the  customer. 

Healthcare  organizations  are  also 
beginning  to  use  big  data  techniques  to 
uncover  suspicious  activity,  with  good 
results.  HMS  Holdings,  which  coor¬ 
dinates  benefits  and  looks  for  ethical 
problems  for  government  agencies  and 
commercial  healthcare  plans,  helped 
recover  $2  billion  in  costs  related  to 
fraud,  waste  and  abuse  in  2011,  says  CIO 
Cynthia  Nustad. 

HMS  analysts  and  investigators  comb 
petabytes  of  data  in  queries  of  billions  of 
rows,  she  says.  They  use  advanced  que¬ 
ries  and  analysis,  and  will  soon  be  lever¬ 
aging  data  visualization— using  pictures 


“Fraud  prevention  is  built  in  during 
the  design  of  IT  systems.” 

-Kimjohnson,  CIO,  Graham  Group 


stock  from  SAP,  he  says.  Top  leaders 
considering  these  measures  before  set¬ 
ting  up  new  technology  and  business 
processes  reflects  a  more  enlightened 
approach  to  fighting  corporate  crime, 
Johnson  says.  “We  don’t  want  to  be  one 
of  those  bad  crime  stories  in  the  media.” 

Next:  Predictive 
Monitoring 

For  Romney,  the  IT  professor,  there  are 
no  small  corporate  crimes,  just  big  ones 
discovered  early.  “Once  I  perpetrate  a 
fraud  and  get  away  with  it,  do  I  do  it  just 
once  and  stop?  No.  Human  greed  is  such 
that  if  I  can  take  a  little,  why  not  take 
more?”  he  says.  Criminals  start  by  steal¬ 
ing  small  amounts  over  periods  of  time. 
Then  they  take  larger  amounts  more 
frequently.  Many  times,  they  get  caught. 

The  next  question  for  CIOs,  he  says, 
is,  How  can  we  figure  out  what  the  really 
smart  criminals  are  doing? 

Beyond  detection  and  prevention 
lies  the  possibility  of  prediction.  Credit- 
card  holders  know  that  fraud  monitoring 
systems  at  banks  alert  customer  service 
agents  to  unusual  transactions.  A  rush 
of  purchases  of  high-end  electronics  or 
airline  tickets  can  trigger  a  call  to  the 
credit-card  holder  to  make  sure  these 
items  are  legitimate.  Sometimes,  a  card 


and  maps  of  query  results— to  identify 
potential  fraud  faster.  “If  we  can  make 
it  interesting  and  artful,  then  the  num¬ 
ber  of  questions  you  can  answer  more 
quickly  is  very  significant.” 

Of  course,  people  tend  to  think  that 
ruinous  fraud  won’t  happen  to  them. 
That’s  probably  what  executives  at  Bar¬ 
ings  Bank,  a  233-year-old  institution, 
thought  before  it  collapsed  in  1995  after 
a  rogue  trader  lost  $1.3  billion  and  tried 
to  cover  it  up.  And  MF  Global,  a  now- 
bankrupt  brokerage,  is  under  investiga¬ 
tion  by  the  Department  of  Justice  and 
the  Securities  and  Exchange  Commis¬ 
sion  for  alleged  bookkeeping  problems. 
Trustees  estimate  that  up  to  $1.2  billion 
is  missing. 

Watching  giant  companies  go  down 
at  the  hands  of  insider  criminals  has 
provided  an  education  to  CIOs  willing 
to  learn,  says  Johnson,  Graham  Group 
CIO.  “Ten  years  ago,  I’d  have  said,  ‘This 
is  not  my  area.’  But  now  it’s  very  impor¬ 
tant  for  me  to  be  involved,”  he  says.  “It’s 
another  way  we’re  measured:  Not  just 
how  efficient  IT  makes  a  process,  but 
how  controlled  the  process  is.”  ram 
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company's 
social  media 
offerings.  How 
can  he  prove 
theirworth? 


SOUNDING  BOARD 

Making  Social  Media  Pay 

SCEMARIO  As  a  fitness,  health  and  beauty  products  company,  our  primary  goal  in 
using  social  media  is  to  increase  our  revenue  and  our  customers'  use  of  our  products. 
We  focus  many  of  our  resources  on  the  three  main  social  graphs-Twitter,  Facebook 
and  YouTube-where  each  of  our  customer  groups  use  social  media  a  bit  differently.  For 
example,  existing  customers  become  fans  of  our  company  on  Facebook  and  submit  prod¬ 
uct  reviews  via  outlets  such  as  Bazaar  Voice,  online  community  members  tweet  daily 
progress  in  their  fitness  regimes,  and  coaches  use  YouTube  to  post  before  and  after 
videos  of  people  who  have  used  one  of  our  products. 

I  would  like  to  add  more  strategic  responsibilities  to  my  social  media  group,  in  addi¬ 
tion  to  their  typical  tasks  of  activity  tracking  and  observing  traffic.  I'm  also  establishing 
a  metrics  dashboard  so  I  can  correlate  new  social  media  initiatives  with  their  outcomes. 
I  know  that  being  active  in  the  social  media  world  has  become  almost  mandatory  for 
companies  today,  but  how  much  of  it  is  simply  hype  and  how  much  empirical  evidence 
can  you  find  showing  that  customer  loyalty  and  company  growth  can  be  directly  attrib¬ 
uted  to  social  media  activities?  ►  ►► 


The  CIO  Executive  Council  is  a  global  peer  advisory  service  and  professional  association  of  more 
than  500  CIOs,  founded  by  CIO's  publisher.  To  learn  more,  visit  council.cio.com. 
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Optimize  Reorganization 


USE  CUSTOMER  FEEDBACK  TO  INFORM  NEW  PRODUCTS 

ADVICE  Our  company  is  built  around  people  socially 
expressing  themselves  through  greeting  cards.  They  are 
a  very  passionate  consumer  base.  We  use  social  media 
for  three  goals— increasing  brand  awareness,  marketing 
activity  for  our  brands,  and  focusing  on  customer  care  by 
listening  and  responding  to  user  feedback.  The  majority  of  our  efforts  go 
to  building  and  maintaining  Facebook  fan  pages  for  each  of  our  brands. 

We  feel  it  is  important  to  track  comments  and  ideas  shared  on  the  fan 
pages  and  use  this  information  to  guide  us  in  developing  new  customer 
experiences  and  card  content.  One  example  of  this  is  when  we  changed  the 
tone  of  an  Easter  card  that  was  already  live  because  we  felt  the  messaging 
did  not  meet  the  needs  of  our  audience.  We  came  to  this  conclusion  because 
of  conversations  we  observed  on  our  Facebook  fan  page.  As  a  result  of  these 
changes,  this  card  became  one  of  our  most-sent  cards  last  Easter  season. 

Some  of  the  metrics  we  track  are  the  number  of  fans,  number  of  coupon 
codes  redeemed  from  social  media  marketing  campaigns,  and  overall  level 
of  engagement  with  our  fans.  We  also  monitor  user  activity  from  our  fan 
pages.  Some  of  the  tools  we  use  are  ClearSaleing  tracking  and  Facebook 
Insights.  Over  time,  I  think  we  will  see  email  campaigns  become  a  smaller 
part  of  the  customer  communication  plan  and  the  majority  of  customer 
communication  will  flow  through  social  media. 


download  Learn  what  four  top- 
level  companies  are  doing  to  ensure 
that  reorganization  does  not  mean 
disorganization.  IT  professionals  are  as 
likely  as  anyone  to  invest  a  tremendous 
amount  of  meaning  in  their  titles,  their 
headcount  and  their  reporting  lines.  CIOs 
who  reorganize  too  often  (or  poorly) 
are  in  danger  of  losing  talent,  damag¬ 
ing  morale,  and  confusing  the  business. 

In  this  panel  discussion,  CIO  magazine 
columnist  and  executive  recruiter  Martha 
Heller  talked  with  IT  leaders  who  have 
learned  the  right  way  to  reorganize: 

Doug  Rousso  from  CBS,  Steve  Finnerty 
from  Applied  Materials,  Don  Goldstein 
from  CB  Richard  Ellis,  and  Ramzi  Najm 
from  Allergan.  council.cio.com/DL412 


Enhancing  Transformation 


read  In  this  first  installment  of  the  IDG 
Enterprise  CIO  Interview  Series,  Council 
member  Christian  Anschuetz,  CIO  at 
Underwriters  Laboratories,  spoke  with 
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IDGE  Chief  Content  Officer  John  Gallant 


JIM  DIMARZIO,  CIO,  MAZDA  NORTH  AMERICA  OPERATIONS 

BE  WILLING  TO  MODIFY  CORPORATE  POLICIES 
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ADVICE  Mazda  has  a  passionate  consumer  base,  and  it 
really  made  sense  for  us  to  bring  the  offline  conversations 
owners  were  already  having  with  each  other  onto  social 
media  sites.  If  you  choose  to  do  nothing,  the  conversa¬ 
tions  are  still  going  to  happen.  You  just  won’t  have  the 
audience’s  affection  or  be  able  to  influence  them.  We  have  two  primary 
constituencies:  local  dealership  franchisees  and  consumers,  who  range 
from  first-time  buyers  to  Mazda  enthusiasts.  Our  focus  is  on  four  social 
networks— Facebook,  Flickr,  Twitter  and  YouTube— which  cover  all  types 
of  communication,  including  microblogging,  video,  still  photography  and 
community.  Facebook  is  our  hub,  and  we  use  metrics  such  as  fan  counts 
and  participation  to  compare  our  Facebook  presence  with  our  competitors’. 

We  don’t  have  a  dedicated  social  media  group,  and  we  view  all  Mazda 
employees  as  our  social  media  team.  This  was  a  conscious  decision,  and 
we  actually  reversed  an  existing  corporate  policy  that  required  that  the  PR 
department  have  strong  command  and  control  of  all  communication.  We 
wrote  new  internal  policies  that  empowered  employees  to  get  out  on  social 
networks  as  stewards  of  the  Mazda  brand.  For  strategic  direction  and  lead¬ 
ership,  we  look  to  Mazda’s  digital  marketing  team  and  two  external  agencies. 

We  have  been  successful  using  tools  such  as  Scout  Labs,  Social  Mention 
and  Google  Alerts  for  tracking  metrics  and  engagement.  But  we  expect  that 
someday  we  may  need  to  make  a  larger  investment  in  developing  an  internal 
app  to  help  with  tracking  engagement  and  analyzing  results. 
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about  IT's  role  in  shaping  and  supporting 
business  change  and  what  it  means  for 
him  and  his  organization.  Underwriters 
Laboratories  transformed  from  a  non¬ 
profit  into  a  for-profit  company  in  the 
United  States  this  year,  and  it's  focusing 
on  delivering  new  products  and  services 
to  its  global  customers.  Anschuetz  dis¬ 
cussed  why  embracing  consumer  tech¬ 
nology  is  critical  for  amplifying  human 
ability  and  how  IT  should  be  measured 
for  its  success  in  driving  customer  value 
and  revenue.  council.cio.com/CI0412 


Benchmarking  Investment 


signup  The  latest  Peer  Intelligence 
benchmark  summary  report  will  be  avail¬ 
able  soon.  This  report  gathers  and  distills 
investment  and  benefits  data  from  a 
quarterly  survey  open  to  Council  mem¬ 
bers  and  members  of  the  CIO  Linkedln 
forum.  It  covers  six  technology  areas- 
Bl,  Cloud,  CRM,  Desktop  Virtualization, 
ERP  and  Mobility— to  provide  peer  intelli¬ 
gence  for  you  to  use  as  you  make  strate¬ 
gic  IT  decisions.  Sign  up  to  get  it  now. 
council.cio.com/PI412 
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NCI  BUILDING  SYSTEMS 

Steeling  for  a  Rebuild 

Driven  to  the  brink  of  bankruptcy,  this  metal  buildings 
maker  is  retooling  its  engineering  workflow  with  IT 

Norm  chambers  All  our  products  rely  on  nonresidential 
new  construction,  and  that  market  in  this  country  is 
more  than  45  percent  below  average  right  now.  We’ve 
had  three  consecutive  years  of  decline,  and  in  2009,  we 
were  at  risk  of  bankruptcy.  The  question  was:  What 
are  we  going  to  do  to  survive?  And  we  answered  that 
by  asking:  What  are  we  going  to  do  with  technology? 


Because  without  technology,  we 
wouldn’t  have  been  able  to  reduce 
the  number  of  plants  we  had  while 
maintaining  all  our  brands  and  sales 
channels. 

Eric  Brown  Starting  two  years  ago, 
we  began  rolling  out  an  integrated 
building-component  engineering 
system.  This  integrates  orders  from 


drawing  up  estimates  for  customers 
through  engineering  details  and  ulti¬ 
mately  to  the  computer-controlled 
machines  that  cut  and  shape  steel  on 
plant  floors.  Totally  automated— no 
manual  hand-offs  and  no  disconnects. 

Chambers  The  notion  was  to  get  to 
a  point  from  a  technology  perspective 
where  any  one  of  our  plants  can  fabri¬ 


cate  for  any  one  of  our  10  brands.  We 
can  look  at  where  a  building  is  to  be 
delivered  and  make  the  components 
in  the  plant  closest  to  the  delivery 
site.  This  hub-and-spoke  approach 
is  transformational  for  us.  Half  the 
manufacturing  costs  have  gone  away, 
but  we  can  still  produce  with  eight 
plants  what  we  used  to  do  with  16. 

Brown  Every  county’s  building 
codes  are  programmed  in.  Before, 
those  had  to  be  looked  up  in  books. 
We’ve  automated  clash  detection, 
when  components  of  a  building  over¬ 
lap  in  ways  they  shouldn’t.  Engineers 
can  fix  those  on  the  fly,  and  the  sys¬ 
tem  will  redraw  the  building  with  the 
corrections.  All  the  information  auto¬ 
matically  downloads  to  the  machines 
that  cut  and  bend  steel.  Before,  you’d 
print  bills  of  materials  and  designs, 
and  everybody  would  have  to  work 
from  those  printouts  and  drawings. 

Chambers  The  engineering 
system  has  sped  up  our  delivery 
and  improved  quality.  Customers 
used  to  have  to  wait  weeks  to  get 
their  drawings;  we  can  now  provide 
them  in  five  days.  No  one  else  can  do 
that.  All  those  things  would  not  have 
been  possible  if  not  for  our  commit¬ 
ment  to  IT  as  a  strategic  part  of  our 
business. 

Brown  This  has  been  a  conserva¬ 
tive  industry,  but  younger  people  are 
taking  over  the  family  businesses  we 
work  with,  and  they— along  with  the 
people  we’re  hiring— are  looking  for 
applications  that  will  run  on  mobile 
platforms.  We’ve  got  to  keep  up,  and 
we’re  rewriting  our  engineering 
system  for  low-complexity  buildings 
so  it  can  run  on  iPads  and  Android 
devices. 


As  told  to  Rick  Pastore,  VP  of  Editorial  and 
Programs  at  the  CIO  Executive  Council. 
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MARKETPLACE 


from  SMS^® 

(2.4  GHz 
Quad  Core) 


►  BUY 
from  SMS 

(8  GB  Server 
Module) 


SELL 
to  SMS 

(1.8  GHz 
Quad  Core) 


/I  SELL 
to 


SMS 

(4  GB  Server 
Module) 


on  Dell  PowerEdge,  HP  ProLiant, 
and  IBM  xSeries  upgrades! 

V  Lifetime  replacement  warranty 

+/  Increase  productivity  with  value-  priced 
server  upgrades 

^  Increase  your  IT  Budget  with  trade-in 
value 

V  Knowledgable  customer  service, get  the 
right  upgrades 


r 

Memory  Upgrades 

v 

Dell 

2GB 

4GB 

8GB 

Type 

PowerEdge  R  Series 

$33.50 

$44.50 

$99.50 

DDR3  ECC  Registered 

PowerEdge  2950 

$28.50 

$95.00 

$295.00 

FBDIMM 

PowerEdge  2850 

$63.00 

$78.00 

N/A 

DDR2  ECC  Registered 

PowerEdge  1950 

$28.50 

$95.00 

$295.00 

FBDIMM 

PowerEdge  1850 

$63.00 

$78.00 

N/A 

DDR2  ECC  Registered 

HP 

ProLiant  DL380  G5 

IBM 

$28.50 

$95.00 

$295.00 

FBDIMM 

. 

x3650  M3 

$31.25 

$73.75 

$187.50 

DDR3  ECC  Registered  VLP 

X3550  M3 

$31.25 

$73.75 

$187.50 

DDR3  ECC  Registered  VLP 

X3250  M3 

$31.25 

$73.75 

$187.50 

DDR3  ECC  Registered  VLP 

‘More  upgrades  available,  visit  our  site:  www.SMSassembly.com  for  details 

We  also 
buy  servers  and  their 
components 


SMS  ASSEMBLY,  INC 

the  right  memory  upgrades 

239.596.2254 

www.SMSassemlily.coiii 


Q:  Want  to  reach  140,000  readers? 
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The  Marketplace  section  of 
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For  more  information  contact: 
Enku  Gubaie 
508.766.5487 

egubaie@idgenterprise.com 


Online  CISSP®  Exam 
Preparation 
Course 

Our  online  12-topic 
(ISC)2®  CISSP®  Exam 
Preparation  Course  runs 
May  1st  through  May  21st 

Offered  by 

Knowledge-Source.org 

Knowledge  Source  is  an  Academia-Industry 
alliance  affiliated  with  the  Information 
Institute.  Course  taught  by  university  faculty 
and  industry  professionals.  Seats  limited. 
Registration  must  be  made  online. 

Visit  www.Knowledge-Source.org 
for  more  details  and  to  register. 
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Virtual  Visiting  Hours 

For  parents  who  want  to  show  off  their  newborns  to  friends  and  family,  hospital  visiting  hours  can  be  a 
bit  limiting.  Tely  Labs,  a  maker  of  video  calling  systems,  and  TVR  Communications,  a  provider  of  bedside 
applications  and  AV  products,  recently  launched  TelyHD,  a  video  calling  system  that  allows  new  parents 
to  communicate  with  loved  ones  from  their  hospital  rooms.  The  system  relies  on  Skype,  requiring  users  to 
have  a  Skype  ID,  and  runs  over  a  Wi-Fi  connection,  using  a  flat-screen  HDTV  as  a  monitor.  The  patient  uses 
a  bedside  remote  to  control  everything,  including  adjusting  the  pan,  zoom  and  tilt  of  the  camera,  which  sits 
atop  the  monitor.  TelyHD  is  being  piloted  at  several  hospitals  this  year;  the  first  test  takes  place  in  a  New 
York  maternity  ward.  Sreekanth  Ravi,  CEO  of  Tely  Labs,  says  the  company  hopes  to  expand  the  system  to 
allow  doctors  to  video  chat  with  patients  at  home.  “The  doctor  is  not  always  able  to  check  in  on  patients,”  he 
says.  “Having  a  system  like  this  facilitates  this  communication  in  HD.”  —Lauren  Brousell 


One  island.  60  school  districts. 
$350  million  savings. 


That's  what  is  happening  on  Long  Island,  New  York.  Sixty  school  districts  on  the  118-mile  island  are  saving  more 
than  $350  million  by  reducing  energy  use  and  improving  operational  efficiency. 


Partnering  with  Johnson  Controls,  districts  are  upgrading  400  buildings.  Improvements  include  high-efficiency 
lighting,  HVAC  upgrades,  door  and  roof  replacements  and  installation  of  Metasys®  building  management  systems 
to  monitor  and  control  energy  use. 

The  result?  The  districts  are  expecting  a  combined  savings  of  $350  million  over  18  years.  Johnson  Controls  is 
guaranteeing  these  savings  through  performance  contracts,  which  offset  the  cost  of  the  building  improvements. 
And  the  districts  are  reinforcing  the  importance  of  sustainability  to  their  students  in  an  enhanced 
learning  environment. 

To  find  out  how  Johnson  Controls  can  help  make  your  building  work  for  you  more  efficiently,  sustainably  and 
profitably,  visit  MakeYourBuildingsWork.com  or  call  888-833-1049. 


Johnson 
Controls 


Johnson  Controls  ranked  #1  in  Corporate  Responsibility  Magazine's  12th  annual  "100  Best  Corporate  Citizens  List" 


VALUE  BEHIND 

BIG 

DATA 


When  organizations  get  to  the  point  where  their  volume,  velocity 
and  variety  of  data  exceed  storage  or  computing  capacity,  there 
are  some  big  challenges  -  but  even  bigger  opportunities  to  achieve 
unprecedented  business  value.  So,  where  do  they  turn  when  looking 
for  optimal  ways  to  gain  insights  from  these  larger  data  sets  in  shorter 
reporting  windows?  They  turn  to  SAS. 

Speed  to  insight 

From  banking  and  retail  to  health  care  and  insurance,  SAS  is 
helping  industries  gain  insights  that  once  took  weeks  and  days 
-  in  just  hours,  minutes  and  seconds.  It's  all  about  getting  to 
the  relevant  data  quicker,  revealing  previously  unseen  patterns, 
sentiments  and  relationships,  delivering  that  information  into  a 
real-time  architecture  and  speeding  the  time  to  insights. 

High-performance  analytics  from  SAS 

Combining  industry-leading  analytics  software  with  high-performance 
computing  technologies  produces  fast  answers  to  previously 
unsolvable  problems  -  and  enables  our  customers  to  gain 
competitive  advantage.  SAS  Grid  Computing  creates  a  centrally 
managed,  shared  environment  for  processing  large  jobs  and 
a  growing  number  of  users  efficiently.  SAS  In-Database  builds 
analytic  logic  into  the  database  itself  for  improved  agility  and 
governance.  And  SAS  In-Memory  Analytics  eliminates  the  need 
for  disk-based  processing,  allowing  for  much  quicker  response 
times.  Together,  the  components  of  this  integrated,  supercharged 
platform  are  changing  the  decision  making  landscape  -  and 
resetting  how  the  world  solves  business  problems.  Find  out  more 
about  how  SAS  can  help  you  realize  the  business  value  achieved 
from  capitalizing  on  complexity. 

Cacti  SAS  customer  s  experience  is  unique.  Actual  results  vary  depending  on  tlte  customer  s  individual  conditions.  SAS  does  not  guarantee  results,  and  nothing  herein  should 
be  construed  as  constituting  an  additional  warranty.  SAS  and  all  other  SAS  Institute  Inc  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc 
in  the  USA  and  otlier  countnes.  ©  201?  SAS  Institute  Inc.  All  rights  reserved.  S87616US  021 2 


A  leading  bank  reduced  loan 
default  calculation  times  from 
96  hours  to  just  4. 


A  major  retailer  reduced 
the  time  it  takes  to  optimize 
store-specific  pricing  each 
week  from  30  hours  to  2. 


sas.com/bigvalue 
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THE  POWER  TO  KNOW 


